Security News

Cisco fixes critical, high severity pre-auth flaws in VPN routers
2021-08-04 19:20

Cisco has addressed pre-auth security vulnerabilities impacting multiple Small Business VPN routers and allowing remote attackers to trigger a denial of service condition or execute commands and arbitrary code on vulnerable devices. Luckily, as the company explains, the remote management feature is disabled by default on all affected VPN router models.

UfiSpace releases S9600 series open aggregation routers for broadband and mobile operator networks
2021-07-30 00:10

UfiSpace launched its S9600 series open aggregation routers based on Broadcom's Qumran2c silicon. "With our previous open disaggregated solutions for the cell site, core and edge networks, service providers were able to foster innovation, reduce vendor lock-in and obtain better TCO synergies within their network," says UfiSpace CEO, Vincent Ho. "We are excited to provide our customers with even more benefits by enabling open disaggregation for their aggregation network as well."

China-Linked APT31 Abuses Hacked Routers in Attacks, France Warns
2021-07-22 12:54

The French National Agency for the Security of Information Systems on Wednesday issued an alert to warn organizations that a threat group tracked as APT31 has been abusing compromised routers in its recent attacks. The agency has shared indicators of compromise to help organizations detect potential attacks.

Cisco Discloses Details of Critical Advantech Router Tool Vulnerabilities
2021-07-19 14:51

Cisco's Talos threat intelligence and research unit has disclosed the details of several critical vulnerabilities affecting a router monitoring application made by Taiwan-based industrial and IoT solutions provider Advantech. The affected tool is R-SeeNet, which is designed to help network administrators monitor their Advantech routers.

D-Link issues hotfix for hard-coded password router vulnerabilities
2021-07-16 14:36

D-Link has issued a firmware hotfix to address multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. The CVE-2021-21818 and CVE-2021-21820 hard-coded password and credentials vulnerabilities [1, 2] exist in the router's Zebra IP Routing Manager and the Libcli Test Environment functionality.

Edgecore Networks releases aggregation router to address 5G deployment challenges
2021-07-08 00:00

Edgecore Networks released a new open router product family. The AS7926-40XKFB 100G Aggregation Router solution enables carriers to upgrade their network infrastructure to address the challenges of 5G deployment and the tremendous traffic growth from the network edge to the core.

Microsoft warns of serious vulnerabilities in Netgear's DGN2200v1 router
2021-07-01 17:45

Netgear has patched serious security vulnerabilities in its DGN2200v1 network router, following the discovery of "Very odd behaviour" by a Microsoft security research team - a somewhat understated way of saying that attackers can gain "Complete control over the router." As a result, it's possible for remote attackers to take over the router at any time - as discovered by members of the Microsoft 365 Defender Research Team.

Microsoft warns of serious vulnerabilities in Netgear's DGN220)v1 router
2021-07-01 17:45

Netgear has patched serious security vulnerabilities in its DGN2200v1 network router, following the discovery of "Very odd behaviour" by a Microsoft security research team - a somewhat understated way of saying that attackers can gain "Complete control over the router." As a result, it's possible for remote attackers to take over the router at any time - as discovered by members of the Microsoft 365 Defender Research Team.

Critical, Exploitable Flaws in NETGEAR Router Firmware
2021-07-01 14:49

Security researchers at Microsoft are flagging multiple gaping security holes in firmware shipped on NETGEAR routers, warning that exploitation could lead to identity theft and full system compromise. The three vulnerabilities, rated critical by NETGEAR, affect the firmware on NETGEAR DGN-2200v1 series routers.

Netgear Authentication Bypass Allows Router Takeover
2021-07-01 11:30

Netgear has patched three bugs in one of its router families that, if exploited, can allow threat actors to bypass authentication to breach corporate networks and steal data and credentials. Microsoft security researchers discovered the bugs in Netgear DGN-2200v1 series routers while they were researching device fingerprinting, Microsoft 365 Defender research team's Jonathan Bar Or said in a blog post, posted Wednesday.