[ad_1]
Cybersecurity researchers have detailed a excessive severity flaw in KCodes NetUSB part that is built-in into hundreds of thousands of end-user router units from Netgear, TP-Hyperlink, Tenda, EDiMAX, D-Hyperlink, and Western Digital, amongst others.
KCodes NetUSB is a Linux kernel module that allows units on a neighborhood community to supply USB-based companies over IP. Printers, exterior exhausting drives, and flash drives plugged right into a Linux-based embedded system (e.g., a router) are made out there through the community utilizing the motive force.
CVE-2021-45608 (CVSS rating: 9.8), because the safety flaw is tracked as, pertains to a buffer overflow vulnerability that, if efficiently exploited, can permit attackers to execute code remotely within the kernel and carry out malicious actions of their alternative, in keeping with a report shared by SentinelOne with The Hacker Information.
That is the newest in a string of NetUSB vulnerabilities that has been patched in recent times. In Might 2015, researchers from SEC Seek the advice of disclosed one other buffer overflow flaw (CVE-2015-3036) that would lead to a denial-of-service (DoS) or code execution.
Then in June 2019, Cisco Talos divulged particulars of two weaknesses in NetUSB (CVE-2019-5016 and CVE-2019-5017) that would permit an attacker to inappropriately pressure choose Netgear wi-fi routers into disclosing delicate data and even giving the attacker the power to remotely execute code.
Following accountable disclosure to KCodes on September 20, 2021, the Taiwanese firm issued a patch to all distributors on November 19, after which Netgear launched firmware updates containing fixes for the vulnerability.
SentinelOne has shunned releasing a proof-of-concept (PoC) code in mild of the truth that different distributors are nonetheless within the strategy of transport updates. However the cybersecurity agency cautioned the potential of an exploit rising within the wild regardless of the technical complexity concerned, making it crucial that customers apply the fixes to mitigate any potential danger.
“Since this vulnerability is inside a third-party part licensed to numerous router distributors, the one method to repair that is to replace the firmware of your router, if an replace is out there,” researcher Max Van Amerongen stated. “You will need to test that your router is just not an end-of-life mannequin as it’s unlikely to obtain an replace for this vulnerability.”
[ad_2]
