{"id":84662,"date":"2020-06-10T01:42:15","date_gmt":"2020-06-09T23:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti"},"modified":"2020-06-10T01:42:15","modified_gmt":"2020-06-09T23:42:15","slug":"uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","title":{"rendered":"O vulnerabilitate \u00een UPnP, care poate fi folosit\u0103 pentru amplificarea atacurilor DDoS \u0219i scanarea re\u021belei interne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezv\u0103luite<\/a><\/noindex> informa\u021bii despre vulnerabilit\u0103\u021bi<\/a><\/noindex> (CVE-2020-12695<\/a><\/noindex>) \u00een protocolul UPnP, care permite organizarea trimiterii traficului c\u0103tre un destinatar arbitrar, folosind opera\u021bia \u201eSUBSCRIBE\u201d prev\u0103zut\u0103 \u00een standard. Vulnerabilitatea a fost denumit\u0103 CallStranger<\/a><\/noindex>. Vulnerabilitatea poate fi utilizat\u0103 pentru extragerea de date din re\u021bele protejate de sisteme de prevenire a pierderilor de date (DLP), pentru organizarea scan\u0103rii porturilor calculatoarelor din re\u021beaua intern\u0103, precum \u0219i pentru amplificarea atacurilor DDoS prin intermediul milioanelor de dispozitive UPnP conectate la re\u021beaua global\u0103, cum ar fi modemurile prin cablu, routerele de acas\u0103, consolele de jocuri, camerele IP, dispozitivele TV \u0219i imprimantele.<\/p>\n

Problema provocat\u0103<\/a><\/noindex> prin faptul c\u0103 func\u021bia \u201eSUBSCRIBE\u201d prev\u0103zut\u0103 \u00een specifica\u021bie permite oric\u0103rui atacator extern s\u0103 trimit\u0103 pachete HTTP cu antetul Callback \u0219i s\u0103 foloseasc\u0103 dispozitivul UPnP ca un proxy pentru a trimite cereri c\u0103tre alte gazde. Func\u021bia \u201eSUBSCRIBE\u201d este definit\u0103 \u00een specifica\u021bia UPnP \u0219i este utilizat\u0103 pentru a urm\u0103ri modific\u0103rile \u00een alte dispozitive \u0219i servicii. Prin intermediul antetului HTTP Callback se poate determina un URL arbitrar, la care dispozitivul va \u00eencerca s\u0103 stabileasc\u0103 o conexiune. <\/p>\n

\"O<\/a><\/noindex><\/center><\/p>\n

Problema afecteaz\u0103 aproape toate implement\u0103rile UPnP bazate pe specifica\u021bii<\/a><\/noindex>, emise \u00eenainte de 17 aprilie. De asemenea, existen\u021ba vulnerabilit\u0103\u021bii a fost confirmat\u0103<\/a><\/noindex> \u00eentr-un pachet deschis hostapd<\/a><\/noindex> cu implementarea accesului wireless (WPS AP). Corec\u021bia este disponibil\u0103 deocamdat\u0103 sub form\u0103 de de patch-uri<\/a><\/noindex>. \u00cen distribu\u021biile de actualiz\u0103ri, aceasta nu a fost \u00eenc\u0103 lansat\u0103 (Debian<\/a><\/noindex>, OpenWRT<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>, SUSE<\/a><\/noindex>, Fedora<\/a><\/noindex>, Arch<\/a><\/noindex>). Problema este, de asemenea, implic\u0103<\/a><\/noindex> solu\u021bii bazate pe stiva UPnP deschis\u0103 pupnp<\/a><\/noindex>, informa\u021biile despre corec\u021bii pentru care nu sunt disponibile deocamdat\u0103.<\/p>\n

Protocolul UPnP define\u0219te un mecanism pentru descoperirea automat\u0103 a dispozitivelor \u00een re\u021beaua local\u0103 \u0219i interac\u021biunea cu acestea. Protocolul a fost ini\u021bial proiectat pentru utilizare \u00een re\u021bele interne \u0219i nu prevede forme de autentificare \u0219i verificare. Cu toate acestea, milioane de dispozitive nu dezactiveaz\u0103 suportul UPnP pe interfe\u021bele re\u021belei externe \u0219i r\u0103m\u00e2n accesibile<\/a><\/noindex> pentru cereri din re\u021beaua global\u0103. Atacul poate fi efectuat prin orice astfel de dispozitiv UPnP.
\nDe exemplu, consolele Xbox One pot fi atacate prin portul re\u021belei 2869, deoarece permit monitorizarea prin comanda SUBSCRIBE a modific\u0103rilor, cum ar fi oferirea accesului partajat la con\u021binut.<\/p>\n

Organiza\u021bia Open Connectivity Foundation (OCF) a fost informat\u0103 despre problem\u0103 la sf\u00e2r\u0219itul anului trecut, dar ini\u021bial a refuzat s\u0103 o considere o vulnerabilitate \u00een specifica\u021bie. Dup\u0103 un raport mai detaliat, existen\u021ba problemei a fost recunoscut\u0103 \u0219i s-a ad\u0103ugat \u00een specifica\u021bie o cerin\u021b\u0103 de utilizare a UPnP doar pe interfe\u021bele LAN. Deoarece problema este cauzat\u0103 de o neglijen\u021b\u0103 \u00een standard, rezolvarea vulnerabilit\u0103\u021bii pentru dispozitivele individuale poate dura mult timp, iar pentru dispozitivele mai vechi, actualiz\u0103rile de firmware ar putea s\u0103 nu apar\u0103.<\/p>\n

Ca solu\u021bii pentru protec\u021bie, se recomand\u0103 izolarea dispozitivelor UPnP de cererile externe printr-un firewall, blocarea cererilor HTTP externe \u201eSUBSCRIBE\u201d \u0219i \u201eNOTIFY\u201d pe sistemele de prevenire a atacurilor sau dezactivarea protocolului UPnP pe interfe\u021bele de re\u021bea externe. Produc\u0103torilor li se recomand\u0103 s\u0103 dezactiveze func\u021bia SUBSCRIBE \u00een set\u0103rile implicite \u0219i s\u0103 limiteze activarea acesteia doar la cererile din re\u021beaua intern\u0103.
\nPentru a testa susceptibilitatea dispozitivelor dvs. la vulnerabilitate publicat<\/a><\/noindex> un instrument special, scris \u00een Python \u0219i distribuit sub licen\u021ba MIT. <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-12695) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 UPnP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e «SUBSCRIBE». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f CallStranger. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445 (DLP), \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84663,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84662","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een UPnP, potrivit\u0103 pentru amplificarea atacurilor DDoS \u0219i scanarea re\u021belei interne | ProHoster","description":"Informa\u021bii despre","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UPnP, \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:15+00:00","article:modified_time":"2020-06-09T23:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84662","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:53:24","updated":"2022-09-27 14:10:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=84662"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84662\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/84663"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=84662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=84662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=84662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}