Ho ba kotsing ea matsatsi a 0 ho lisebelisoa tsa Netgear tse lumellang phihlello ea metso e hole

Ho seva sa http se sebelisoang ho li-routers tsa Netgear SOHO, tsebahatsoa bofokodi, e u lumellang hore u phethe khoutu ea hau u le hole ntle le netefatso ka litokelo tsa metso le ho fumana taolo e felletseng holim'a sesebelisoa. Bakeng sa tlhaselo, ho lekane ho romela kopo ho koung ea marang-rang eo sebopeho sa marang-rang se sebetsang ho sona. Bothata bo bakoa ke khaello ea ho lekola boholo ba data ea kantle pele u e kopitsa ho buffer ea boholo bo tsitsitseng. Ho ba kotsing ho netefalitsoe mefuteng e fapaneng ea li-routers tsa Netgear, firmware ea eona e sebelisang ts'ebetso e tloaelehileng ea httpd.

Ho tloha ha o sebetsa le stack, firmware ha ea ka ea sebelisa mekhoa ea tšireletso, e kang ho kenya matšoao a canary, o ile a khona ho lokisa mosebetsi o tsitsitseng qhekella, e hlahisang khetla e ka morao e nang le phihlello ea metso ho port 8888. Ketso e etselitsoe ho hlasela 758 e fumanoeng litšoantšo tsa Netgear firmware, empa ho fihlela joale e se e lekoa ka letsoho ho lisebelisoa tse 28. Haholo-holo, tšebeliso e netefalitsoe hore e sebetsa ka mefuta e fapaneng ea mehlala:

  • D6300
  • EA-2200-DGN
  • EKS6100
  • R6250
  • R6400
  • R7000
  • R8300
  • R8500
  • EA-614-WGR
  • EA-624
  • WN3000RP
  • EA-3300
  • EA-3400
  • EA-4000
  • EA-4500
  • WNR834B
  • EA-1000-WNR
  • EA-2000-WNR
  • EA-3500-WNR
  • WNR3500L

Lintlafatso tsa ho lokisa bothata ha li so lokolloe (matsatsi a 0), kahoo basebelisi ba eletsoa ho thibela ho kena boema-kepeng ba HTTP bakeng sa likopo ho tsoa ho litsamaiso tse sa tšepahaleng. Netgear e tsebisitsoe ka tlokotsi ka la 8 Pherekhong, empa ha ea ka ea lokolla lintlafatso tsa firmware ho rarolla bothata ka nako ea matsatsi a 120 eo ho lumellanoeng ka eona mabapi le phatlalatso mme ea kopa ho eketsoa nako ea thibelo. Bafuputsi ba ile ba lumela ho fetisetsa nako ea ho qetela ho June 15, empa qetellong ea May, baemeli ba Netgear ba ile ba boela ba kōpa ho fetisetsa nako ea ho qetela ho fihlela qetellong ea June, e ileng ea haneloa.

Source: opennet.ru

Eketsa ka tlhaloso