Wednesday, June 3, 2015

Slew of Vulnerabilities Found in D-Link Storage Devices

From ThreatPost:


Slew of Vulnerabilities Found in D-Link Storage Devices


Researchers have identified dozens of vulnerabilities in several D-Link products, some of which allow attackers to bypass authentication requirements or upload arbitrary files to target devices.


The vulnerabilities lie in a variety of D-Link network storage devices and the company has produced updated firmware to address some of the problems. Researchers at Search-Lab discovered the vulnerabilities and said that there are a number of different D-Link devices open to the authentication bypass, as well as command injection and arbitrary file upload.

No comments:

Post a Comment