{"id":84662,"date":"2020-06-10T01:42:15","date_gmt":"2020-06-09T23:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti"},"modified":"2020-06-10T01:42:15","modified_gmt":"2020-06-09T23:42:15","slug":"uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","title":{"rendered":"Vulnerabilitet n\u00eb UPnP, i p\u00ebrshtatsh\u00ebm p\u00ebr forcimin e sulmeve DDoS dhe skanimin e rrjetit t\u00eb brendsh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zbulua<\/a><\/noindex> informacion mbi dob\u00ebsin\u00eb<\/a><\/noindex> (CVE-2020-12695<\/a><\/noindex>) n\u00eb protokollin UPnP, e cila lejon organizimin e d\u00ebrgimit t\u00eb trafik\u00ebve n\u00eb ndonj\u00eb marr\u00ebs t\u00eb rast\u00ebsish\u00ebm, duke p\u00ebrdorur operacionin e parashikuar n\u00eb standardin «SUBSCRIBE». Vulnerabilitetit i \u00ebsht\u00eb caktuar emri kodik CallStranger<\/a><\/noindex>. Dob\u00ebsia mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb nxjerr\u00eb t\u00eb dh\u00ebna nga rrjetet e mbrojtura nga sistemet e parandalimit t\u00eb rrjedhjeve t\u00eb t\u00eb dh\u00ebnave (DLP), p\u00ebr organizimin e skanimeve t\u00eb porteve t\u00eb kompjuter\u00ebve n\u00eb rrjetin e brendsh\u00ebm, si dhe p\u00ebr t\u00eb forcuar sulmet DDoS me ndihm\u00ebn e miliarda pajisjeve UPnP t\u00eb lidhura me internetin, t\u00eb tilla si modem\u00ebt kabllor\u00eb, router\u00ebt e sht\u00ebpis\u00eb, konsolat e loj\u00ebrave, kamerat IP, pajisjet TV, qendrat multimediale dhe printer\u00ebt.<\/p>\n

Problemi shkaktua<\/a><\/noindex> nga fakti q\u00eb funksioni i parashikuar n\u00eb specifikim «SUBSCRIBE» lejon \u00e7do sulmues t\u00eb jasht\u00ebm t\u00eb d\u00ebrgoj\u00eb paketa HTTP me titullin Callback dhe t\u00eb p\u00ebrdor\u00eb pajisjen UPnP si nj\u00eb proxy p\u00ebr d\u00ebrgimin e k\u00ebrkesave n\u00eb hoste t\u00eb tjer\u00eb. Funksioni «SUBSCRIBE» \u00ebsht\u00eb i p\u00ebrcaktuar n\u00eb specifikimin UPnP dhe p\u00ebrdoret p\u00ebr t\u00eb ndjekur ndryshimet n\u00eb pajisje dhe sh\u00ebrbime t\u00eb tjera. Me an\u00eb t\u00eb titullit HTTP Callback, mund t\u00eb p\u00ebrcaktohet nj\u00eb URL e rast\u00ebsishme, n\u00eb t\u00eb cilin pajisja do t\u00eb p\u00ebrpiqet t\u00eb vendos\u00eb nj\u00eb lidhje. <\/p>\n

\"Vulnerabilitet<\/a><\/noindex><\/center><\/p>\n

Problemi prek pothuajse t\u00eb gjitha implementimet e UPnP-s\u00eb, t\u00eb bazuara n\u00eb specifikacioni<\/a><\/noindex>, l\u00ebshuar para 17 prillit. Po ashtu, pranimi i dob\u00ebsis\u00eb \u00ebsht\u00eb konfirmuar<\/a><\/noindex> n\u00eb paket\u00ebn e hapur hostapd<\/a><\/noindex> me implementimin e pik\u00ebs s\u00eb qasjes pa tel (WPS AP). Nj\u00eb rregullim \u00ebsht\u00eb ende n\u00eb form\u00ebn e patchesh<\/a><\/noindex>. N\u00eb shp\u00ebrndarjet e p\u00ebrdit\u00ebsimit nuk jan\u00eb l\u00ebshuar ende (Debian<\/a><\/noindex>, OpenWRT<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>, SUSE<\/a><\/noindex>, Fedora<\/a><\/noindex>, Arch<\/a><\/noindex>). Problemi gjithashtu dhe<\/a><\/noindex> zgjidhjeve t\u00eb bazuara n\u00eb stakun e hapur UPnP pupnp<\/a><\/noindex>, informacioni mbi rregullimet p\u00ebr t\u00eb cilin ende nuk \u00ebsht\u00eb n\u00eb dispozicion.<\/p>\n

Protokolli UPnP p\u00ebrcakton nj\u00eb mekaniz\u00ebm p\u00ebr zbulimin automatik t\u00eb pajisjeve n\u00eb rrjetin lokal dhe interaksionin me to. Megjithat\u00eb, protokolli \u00ebsht\u00eb projektuar fillimisht p\u00ebr p\u00ebrdorim n\u00eb rrjetet lokale dhe nuk parashikon asnj\u00eb form\u00eb autentikimi ose verifikimi. Megjithat\u00eb, miliona pajisje nuk e nd\u00ebrprejn\u00eb mb\u00ebshtetje UPnP n\u00eb nd\u00ebrfaqet e tyre t\u00eb jashtme dhe mbeten t\u00eb qasshme<\/a><\/noindex> p\u00ebr k\u00ebrkesat nga interneti. Nj\u00eb sulm mund t\u00eb kryhet p\u00ebrmes \u00e7do pajisjeje UPnP t\u00eb till\u00eb.
\nP\u00ebr shembull, pajisjet Xbox One mund t\u00eb sulmohen p\u00ebrmes portit rrjetor 2869, pasi lejojn\u00eb ndjekjen e ndryshimeve t\u00eb tilla si ofrimi i ndarjes s\u00eb p\u00ebrmbajtjes p\u00ebrmes komand\u00ebs SUBSCRIBE.<\/p>\n

Organizata Open Connectivity Foundation (OCF) u njoftua p\u00ebr problemin n\u00eb fund t\u00eb vitit t\u00eb kaluar, por n\u00eb fillim refuzoi ta konsideronte at\u00eb si nj\u00eb dob\u00ebsi n\u00eb specifikim. Pas nj\u00eb raporti m\u00eb t\u00eb detajuar, pranimi i problemit u b\u00eb dhe n\u00eb specifikim u shtua nj\u00eb k\u00ebrkes\u00eb p\u00ebr p\u00ebrdorimin e UPnP vet\u00ebm n\u00eb nd\u00ebrfaqet LAN. Duke qen\u00eb se problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb munges\u00eb e standardit, zgjidhja e dob\u00ebsis\u00eb n\u00eb pajisje t\u00eb ve\u00e7anta mund t\u00eb zgjas\u00eb shum\u00eb koh\u00eb, dhe p\u00ebr pajisjet e vjetra mund t\u00eb mos l\u00ebshohen p\u00ebrdit\u00ebsime firmueri.<\/p>\n

Si nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb anashkaluar mbrojtjen, rekomandohet izolimi i pajisjeve UPnP nga k\u00ebrkesat e jashtme p\u00ebrmes nj\u00eb firewally, bllokimi i k\u00ebrkesave HTTP t\u00eb jashtme «SUBSCRIBE» dhe «NOTIFY» n\u00eb sistemet e parandalimit t\u00eb sulmeve, ose \u00e7aktivizimi i protokollit UPnP n\u00eb nd\u00ebrfaqet e jashtme rrjetore. Prodhuesit rekomandohet t\u00eb \u00e7aktivizojn\u00eb funksionin SUBSCRIBE n\u00eb konfigurimet e parazgjedhura dhe t\u00eb kufizojn\u00eb pranimin e k\u00ebrkesave vet\u00ebm nga rrjeti i brendsh\u00ebm.
\nP\u00ebr t\u00eb testuar ndjeshm\u00ebrin\u00eb e pajisjeve t\u00eb tyre ndaj dob\u00ebsis\u00eb \u00ebsht\u00eb publikuar<\/a><\/noindex> nj\u00eb mjet t\u00eb ve\u00e7ant\u00eb, t\u00eb shkruar n\u00eb gjuh\u00ebn Python dhe i shp\u00ebrndar\u00eb n\u00ebn licenc\u00ebn MIT. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-12695) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 UPnP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e «SUBSCRIBE». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f CallStranger. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445 (DLP), \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84663,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84662","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb UPnP, p\u00ebrshtatshme p\u00ebr forcimin e sulmeve DDoS dhe skanimin e rrjetit t\u00eb brendsh\u00ebm | ProHoster","description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UPnP, \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:15+00:00","article:modified_time":"2020-06-09T23:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84662","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:53:24","updated":"2022-09-27 14:10:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84662"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84662\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84663"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}