{"id":84662,"date":"2020-06-10T01:42:15","date_gmt":"2020-06-09T23:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti"},"modified":"2020-06-10T01:42:15","modified_gmt":"2020-06-09T23:42:15","slug":"uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","title":{"rendered":"Vulnerabilitet n\u00eb UPnP, i p\u00ebrshtatsh\u00ebm p\u00ebr p\u00ebrforcimin e sulmeve DDoS dhe skanimin e rrjetit t\u00eb brendsh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zbulimi<\/a><\/noindex> informacione mbi mang\u00ebsive<\/a><\/noindex> (CVE-2020-12695<\/a><\/noindex>) n\u00eb protokollin UPnP, q\u00eb lejon organizimin e d\u00ebrgimit t\u00eb trafikut te \u00e7do marr\u00ebs, duke p\u00ebrdorur operacionin «SUBSCRIBE» t\u00eb parashikuar n\u00eb standard. Vulnerabilitetit i \u00ebsht\u00eb caktuar emri kodik CallStranger<\/a><\/noindex>. Vik sist\u00e8m duhet t\u00eb p\u00ebrdoret p\u00ebr nxjerrjen e t\u00eb dh\u00ebnave nga rrjetet e mbrojtura nga sistemet e parandalimit t\u00eb rrjedhjes s\u00eb t\u00eb dh\u00ebnave (DLP), organizimin e skanimeve t\u00eb porteve t\u00eb kompjuter\u00ebve brenda rrjetit lokal, si dhe p\u00ebr p\u00ebrforcimin e sulmeve DDoS me ndihm\u00ebn e miliona pajisjeve UPnP t\u00eb lidhura n\u00eb internet, t\u00eb tilla si modem\u00eb kabllor\u00eb, ruter\u00eb sht\u00ebpiak\u00eb, konsola loj\u00ebrash, kamera IP, pajisje TV, qendra multimedia dhe printera.<\/p>\n

Problemi \u00ebsht\u00eb shkaktuar nga<\/a><\/noindex> faktin q\u00eb funksioni «SUBSCRIBE» i parashikuar n\u00eb specifikim lejon \u00e7do sulmues t\u00eb jasht\u00ebm t\u00eb d\u00ebrgoj\u00eb paketa HTTP me header-in Callback dhe t\u00eb p\u00ebrdor\u00eb pajisjen UPnP si nj\u00eb proxy p\u00ebr d\u00ebrgimin e k\u00ebrkesave te hoste t\u00eb tjer\u00eb. Funksioni «SUBSCRIBE» \u00ebsht\u00eb i p\u00ebrcaktuar n\u00eb specifikimin UPnP dhe p\u00ebrdoret p\u00ebr t\u00eb ndjekur ndryshimet n\u00eb pajisje dhe sh\u00ebrbime t\u00eb tjera. Me ndihm\u00ebn e header-it HTTP Callback mund t\u00eb p\u00ebrcaktohet nj\u00eb URL e caktuar, n\u00eb t\u00eb cil\u00ebn pajisja do t\u00eb p\u00ebrpiqet t\u00eb krijoj\u00eb nj\u00eb lidhje. <\/p>\n

\"Vulnerabilitet<\/a><\/noindex><\/center><\/p>\n

Problemi preku pothuajse t\u00eb gjitha implementimet UPnP, t\u00eb bazuara n\u00eb specifikimet<\/a><\/noindex>, t\u00eb l\u00ebshuara para 17 Prillit. Po ashtu, prezenca e vulnerabilitetit \u00ebsht\u00eb konfirmuar<\/a><\/noindex> n\u00eb paket\u00ebn e hapur hostapd<\/a><\/noindex> me implementimin e pik\u00ebs s\u00eb qasjes pa tela (WPS AP). Nj\u00eb p\u00ebrshtatje tani \u00ebsht\u00eb n\u00eb dispozicion n\u00eb form\u00eb patch-e<\/a><\/noindex>. N\u00eb shp\u00ebrndarjet e p\u00ebrdit\u00ebsimit, ende nuk jan\u00eb l\u00ebshuar (Debian<\/a><\/noindex>, OpenWRT<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>, SUSE<\/a><\/noindex>, Fedora<\/a><\/noindex>, Arch<\/a><\/noindex>). Problemi gjithashtu preket<\/a><\/noindex> zgjidhjeve t\u00eb bazuara n\u00eb stakun e hapur UPnP pupnp<\/a><\/noindex>, informacion mbi rregullimet p\u00ebr t\u00eb, p\u00ebr momentin nuk \u00ebsht\u00eb n\u00eb dispozicion.<\/p>\n

Protokolli UPnP p\u00ebrcakton nj\u00eb mekaniz\u00ebm p\u00ebr zbulimin automatik t\u00eb pajisjeve n\u00eb rrjetin lokal dhe nd\u00ebrveprimin me to. Protokolli fillimisht \u00ebsht\u00eb projektuar p\u00ebr p\u00ebrdorim n\u00eb rrjetet lokale dhe nuk parashikon ndonj\u00eb form\u00eb t\u00eb autentifikimit dhe verifikimit. Megjithat\u00eb, miliona pajisje nuk e \u00e7aktivizojn\u00eb mb\u00ebshtetje UPnP n\u00eb nd\u00ebrfaqet e jashtme t\u00eb rrjetit dhe mbeten t\u00eb aksesueshme<\/a><\/noindex> p\u00ebr k\u00ebrkesa nga rrjeti global. Sulmi mund t\u00eb b\u00ebhet p\u00ebrmes \u00e7do pajisjeje t\u00eb till\u00eb UPnP.
\nP\u00ebr shembull, pajisjet Xbox One mund t\u00eb sulmohen p\u00ebrmes portit t\u00eb rrjetit 2869, pasi lejojn\u00eb ndjekjen e ndryshimeve si\u00e7 \u00ebsht\u00eb dh\u00ebnia e qasjes n\u00eb p\u00ebrmbajtje p\u00ebrmes komand\u00ebs SUBSCRIBE.<\/p>\n

Organizata Open Connectivity Foundation (OCF) u njoftua p\u00ebr problemin n\u00eb fund t\u00eb vitit t\u00eb kaluar, por fillimisht refuzoi ta merrte parasysh si nj\u00eb dob\u00ebsi n\u00eb specifikim. Pas nj\u00eb raporti m\u00eb t\u00eb detajuar, pranimi i ekzistenc\u00ebs s\u00eb problemit u pohua dhe n\u00eb specifikim u shtua nj\u00eb k\u00ebrkes\u00eb p\u00ebr p\u00ebrdorimin e UPnP vet\u00ebm n\u00eb nd\u00ebrfaqet LAN. Duke qen\u00eb se problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb mang\u00ebsi n\u00eb standard, zgjidhja e dob\u00ebsis\u00eb n\u00eb pajisje t\u00eb ve\u00e7anta mund t\u00eb zgjas\u00eb shum\u00eb, dhe p\u00ebr pajisjet m\u00eb t\u00eb vjetra ndoshta nuk do t\u00eb dalin p\u00ebrdit\u00ebsime firmware.<\/p>\n

Si masa mbrojt\u00ebse, rekomandohet t\u00eb izolohet pajisjet UPnP nga k\u00ebrkesat e jashtme me nj\u00eb firewall, t\u00eb bllokohen k\u00ebrkesat HTTP t\u00eb jashtme «SUBSCRIBE» dhe «NOTIFY» n\u00eb sistemet e parandalimit t\u00eb sulmeve ose t\u00eb \u00e7aktivizohet protokolli UPnP n\u00eb nd\u00ebrfaqet e jashtme t\u00eb rrjetit. Prodhuesve u rekomandohet t\u00eb \u00e7aktivizojn\u00eb funksionin SUBSCRIBE n\u00eb cil\u00ebsimet default dhe t\u00eb kufizojn\u00eb pranimin e k\u00ebrkesave vet\u00ebm nga rrjeti i brendsh\u00ebm.
\nP\u00ebr testimin e ndjeshm\u00ebris\u00eb s\u00eb pajisjeve tuaja ndaj dob\u00ebsis\u00eb u publikua<\/a><\/noindex> nj\u00eb mjet i ve\u00e7ant\u00eb, i shkruar n\u00eb gjuh\u00ebn Python dhe i shp\u00ebrndar\u00eb n\u00ebn licenc\u00ebn MIT. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-12695) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 UPnP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e «SUBSCRIBE». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f CallStranger. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445 (DLP), \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84663,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84662","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb UPnP, e p\u00ebrshtatshme p\u00ebr p\u00ebrforcimin e sulmeve DDoS dhe skanimin e rrjetit t\u00eb brendsh\u00ebm | ProHoster","description":"Jan\u00eb zbuluar informacione mbi","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UPnP, \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-upnp-podhodyashhaya-dlya-usileniya-ddos-atak-i-skanirovaniya-vnutrennej-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:15+00:00","article:modified_time":"2020-06-09T23:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84662","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:53:24","updated":"2022-09-27 14:10:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84662"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84662\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84663"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}