DSL router hijacking vulnerability uncovered

[Kevin Lancaster]

DSL router hijacking vulnerability discovered

A ZynOS vulnerability exposes D-Link, TP-Link, and ZTE routers to a DNS hijacking attack

 

[DrJohnZoidberg]

Lots of vulnerabilities being exposed lately.

 

[GreGorGy]

Interesting...

http://mybroadband.co.za/vb/showthread.php/546261-Very-strange-thing

http://mybroadband.co.za/vb/showthr...k-modems-causing-Internet-connection-problems

 

[D-Link]

The DSL-2740R is a discontinued product, none of our current routers have this vulnerability

Kind Regards
D-Link | Building Networks for People

 

[Sinbad]

/hugs mikrotik

 

[digitalp]

The DSL-2740R is a discontinued product, none of our current routers have this vulnerability

Kind Regards
D-Link | Building Networks for People

Why dont you send out a fix for the discontinued products? Dont think i will be getting a DLINK again.

 

[falcon786]

The DSL-2740R is a discontinued product, none of our current routers have this vulnerability

Kind Regards
D-Link | Building Networks for People

Thanks that's reassuring,I'm using the DSL-2750U so that should be fine then?

 

[Bosvark@]

/hugs mikrotik

If you can get the config right...

 

[DrJohnZoidberg]

/hugs mikrotik

/humps pfSense.

 

[Pada]

/hugs mikrotik

I hope you're running on the latest RouterOS, because it recently (19 Jan 2015) fixed like ntp vulnerability too.
Of course when your Mikrotik is correctly configured (firewalled from outside), that shouldn't matter either.

 

[MickZA]

/humps pfSense.

Steady on there Doctor!

/pats IPCop in a non sexual manner

 

[Sinbad]

I hope you're running on the latest RouterOS, because it recently (19 Jan 2015) fixed like ntp vulnerability too.
Of course when your Mikrotik is correctly configured (firewalled from outside), that shouldn't matter either.

Of course it is Drop all packets entering PPP interface unless they're ACKs

 

[GreGorGy]

Thanks that's reassuring,I'm using the DSL-2750U so that should be fine then?

For now, until they decide it is obsolete, then the next day...

Why dont you send out a fix for the discontinued products? Dont think i will be getting a DLINK again.

Good question - and similar approach to be taken by myself.

 

[TimTDP]

The DSL-2740R is a discontinued product, none of our current routers have this vulnerability

Kind Regards
D-Link | Building Networks for People

and the DSL 2750U?

 

[saa044]

I picked this up last week, did not change dns settings to much, but there was a lot of unwanted upload traffic bypassing my q tree. A quick mangle rule and everything was sorted. Got to love Mikrotik.

 

[kianm]

Just make your clients get external DNS server addresses directly from DHCP if internal name resolution is no big deal, solves half the problem already

 

[The_Unbeliever]

/strokes Smoothwall

No worries for me