30
友讯科技无意修复新发现的路由器远程劫持漏洞
source link: https://www.solidot.org/story?sid=62185
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
友讯科技无意修复新发现的路由器远程劫持漏洞
友讯科技（D-Link）无意修复新发现的路由器远程劫持高危漏洞，理由是相关型号的路由器已经终止支持。漏洞 CVE-2019-16920 存在于 DIR-655、DIR-866L、DIR-652 和 DHP-1565 家用无线路由器的最新固件中，这些产品已经不再销售，但以亚马逊为例，第三方销售商仍在出售。问题根源在于命令执行功能缺乏对任意命令执行的完整性检查，允许攻击者获取管理密码或安装后门。
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK