Major D-Link security flaw - Check if your router is affected

[Bradley Prior]

Major D-Link security flaw - Check if your router is affected

Researchers at Fortinet Labs recently discovered that multiple D-Link routers are vulnerable to a security flaw that will not be patched.

The vulnerability enables attackers to perform remote code execution attacks on affected routers, which may allow them to execute commands with root privileges.

 

[Totempole]

So it's this one that's affected?

https://www.loot.co.za/product/d-link-dir-825-e-wireless-ac1200-dual-band-wi-fi-gigabi/dhxg-3627-g400

 

[roughiain]

So what is the difference between the 2 firmware on the ZA Site

ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/G1_BlueWhiteGui/
and
ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/G1_OrangeGui/

 

[carstensdj]

So what is the difference between the 2 firmware on the ZA Site

ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/G1_BlueWhiteGui/
and
ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/G1_OrangeGui/

The colour of the GUI by the looks of the URL... So one will have Blue/White menu's while the other will have Orange.

 

[roughiain]

The colour of the GUI by the looks of the URL... So one will have Blue/White menu's while the other will have Orange.

Anyone prepared to brick their unit in the name of science?

 

[Apogee]

Just updated the Afrihost-supplied DIR-825 for a client this weekend.



When I logged into the interface, a message popped up stating that a firmware update was available.

 

[Abatis_]

having any vulnerable router is generally a bad idea, but this article reminded me about this little router, also d-link, which i still see in so many places, which has been unpatched for YEARS and people still use them

dsl-2750u

 

[Bryn]

I have the 'safe' DIR-825 from Afrihost, but it's only being used as a switch and 5GHz Wi-Fi booster. The real router for the home network is the UniFi Security Gateway and the firmware is up to date. Should be secure enough.

having any vulnerable router is generally a bad idea, but this article reminded me about this little router, also d-link, which i still see in so many places, which has been unpatched for YEARS and people still use themView attachment 737919

dsl-2750u

Makes sense, considering it's possibly the most popular router ever in SA (during its heyday). I had three of them. One is still being used by one of my brothers as a switch I think.

 

[backstreetboy]

having any vulnerable router is generally a bad idea, but this article reminded me about this little router, also d-link, which i still see in so many places, which has been unpatched for YEARS and people still use themView attachment 737919

dsl-2750u

Really? It had an update in 2016...

 

[Magnum]

I garuantee you no one will ever hack Any of my D-Link's. Lightning made bloody sure of that....

 

[Totempole]

Really? It had an update in 2016...

It's 2019 now.

But I still use mine as a bridge for WiFi extending. I mean it's not exactly the most secure router, but if you configure it properly it's safe enough for home use.

The biggest issue with it is that most people change the "Admin" password, but leave the "User" password as default, and the User profile actually has more control over settings than it should.

 

[system32]

flash with OpenWrt - problem solved

 

[roughiain]

flash with OpenWrt - problem solved

Link for the exact version

 

[MrG]

So what is the difference between the 2 firmware on the ZA Site

ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/G1_BlueWhiteGui/
and
ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/G1_OrangeGui/

The Orange is V7.00. The article does not refer to V7 being safe?

 

[roughiain]

The Orange is V7.00. The article does not refer to V7 being safe?

V7 updated 2018 or a V1 updated in the stoneage....

 

[Speedster]

Link for the exact version

[OpenWrt Wiki] D-Link DIR-825

openwrt.org

 

[roughiain]

[OpenWrt Wiki] D-Link DIR-825

openwrt.org

No G1 support or am I blind

 

[Speedster]

No G1 support or am I blind

Not supported. Is that the vulnerable version?

 

[roughiain]

Not supported. Is that the vulnerable version?

lt is an old one from afrihost, black as in the picture

 

[MrG]

Not supported. Is that the vulnerable version?

Afrihost has supplied the G1 Hardware Version, so according to the article it is not vulnerable.