Kuseva ye-http esetshenziswa kuma-routers e-Netgear SOHO, , okukuvumela ukuthi wenze ikhodi yakho ukude ngaphandle kokuqinisekisa ngamalungelo ezimpande futhi uthole ukulawula okugcwele kudivayisi. Ukuze kuhlaselwe, kwanele ukuthumela isicelo embobeni yenethiwekhi lapho isixhumi esibonakalayo sewebhu sisebenza khona. Inkinga ibangelwa ukushoda kokuhlola usayizi wedatha yangaphandle ngaphambi kokuyikopishela kusigcinalwazi esinosayizi ongashintshi. Ukuba sengozini kuqinisekisiwe kumamodeli ahlukahlukene amarutha e-Netgear, i-firmware esebenzisa inqubo evamile esengozini ye-httpd.
Kusukela lapho isebenza ngesitaki, i-firmware ayizange isebenzise izindlela zokuvikela, njengokufaka , ukwazile ukulungisa umsebenzi ozinzile , eyethula igobolondo elibuyela emuva elinokufinyelela kwezimpande ku-port 8888. Ukuxhashazwa kuguqulelwe ukuhlasela i-758 etholwe izithombe ze-firmware ye-Netgear, kodwa kuze kube manje ihlolwe ngesandla kumadivayisi angu-28. Ikakhulukazi, ukuxhashazwa kuqinisekisiwe ukuthi kusebenza kumamodeli ahlukahlukene:
- D6300
- I-DGN2200
- EX6100
- R6250
- R6400
- R7000
- R8300
- R8500
- I-WGR614
- I-WGT624
- I-WN3000RP
- I-WNDR3300
- I-WNDR3400
- I-WNDR4000
- I-WNDR4500
- I-WNR834B
- I-WNR1000
- I-WNR2000
- I-WNR3500
- I-WNR3500L
Izibuyekezo zokulungisa ukuba sengozini azikakhululwa (0-day), ngakho abasebenzisi bayelulekwa ukuthi bavimbe ukufinyelela embobeni ye-HTTP yedivayisi ngezicelo ezivela kumasistimu angathenjwa. AbakwaNetgear baziswe ngokuba sengozini ngoJanuwari 8, kodwa abazange bakhiphe izibuyekezo ze-firmware ukuze kubhekwane nenkinga ngomnqamulajuqu wezinsuku eziyi-120 okuvunyelenwe ngawo mayelana nokudalulwa futhi bacela ukwelulwa esikhathini sokuvinjelwa. Abacwaningi bavumile ukuhambisa umnqamulajuqu ube nguJuni 15, kodwa ekupheleni kukaMeyi, abamele iNetgear baphinde bacela ukuhambisa umnqamulajuqu ufike ekupheleni kukaJuni, okwanqatshwa.
Source: opennet.ru