Kusagadzikana kutatu kwakaonekwa muiyo firmware yeNETGEAR DGN-2200v1 nhevedzano michina, iyo inosanganisa mabasa eiyo ADSL modem, router uye isina waya yekupinda nzvimbo, ichikubvumidza iwe kuita chero mashandiro muwebhu interface pasina humbowo.
Kusagadzikana kwekutanga kunokonzerwa nekuti iyo HTTP server kodhi ine yakaoma-wired kugona kuwana zvakananga mifananidzo, CSS uye mamwe mafaira ekubatsira, izvo zvisingadi kuvimbiswa. Iyo kodhi ine cheki yechikumbiro uchishandisa masks eakajairwa faira mazita uye mawedzero, anoitwa nekutsvaga substring muURL yese, kusanganisira mune yekukumbira paramita. Kana paine substring, peji inoshumirwa pasina kutarisa kupinda kune iyo webhu interface. Kurwiswa kwemidziyo kunouya pakuwedzera zita riripo murondedzero kuchikumbiro; semuenzaniso, kuti uwane iyo WAN interface marongero, unogona kutumira chikumbiro "https://10.0.0.1/WAN_wan.htm?pic.gif" .
Kusagadzikana kwechipiri kunokonzerwa nekushandiswa kweiyo strcmp basa kana uchienzanisa zita rekushandisa uye password. Mu strcmp, kuenzanisa kunoitwa hunhu nehunhu kudzamara mutsauko kana hunhu hune zero kodhi hwasvika, zvichiratidza kupera kwemutsara. Anorwisa anogona kuyedza kufungidzira password nekuyedza mavara nhanho nhanho uye kuongorora nguva kusvika kukanganisa kwechokwadi kwaratidzwa - kana mutengo wawedzera, ipapo hunhu hwacho hwasarudzwa uye unogona kuenderera mberi nekufungidzira munhu anotevera. mutambo.
Kusagadzikana kwechitatu kunokubvumidza kuti utore password kubva pane yakachengetwa dhishi yekurasa, iyo inogona kuwanikwa nekutora mukana wekutanga kusagadzikana (semuenzaniso, nekutumira chikumbiro "http://10.0.0.1:8080/NETGEAR_DGN2200.cfg?pic? .gif)”. Iyo pasiwedhi iripo mune yekurasa mune encrypted fomu, asi iyo encryption inoshandisa iyo DES algorithm uye kiyi yekusingaperi "NtgrBak", iyo inogona kubviswa kubva kune firmware.
Kuti ushandise kusagadzikana, zvinokwanisika kutumira chikumbiro kunetiweki port pane iyo webhu interface iri kushanda (kubva kune yekunze network, kurwiswa kunogona kuitwa, semuenzaniso, uchishandisa iyo "DNS rebinding" nzira). Matambudziko akatogadziriswa mu firmware update 1.0.0.60.
Source: opennet.ru
