Backdoor found in D-Link firmwares

deadite66

deadite66

deadite66

Associate
Joined
28 Jan 2007
Posts
2,303
Link currently down, likely overwhelmed.
http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/

If you change your useragent to a certain string you can log into any effected routers without a login/pass.


Based on the source code of the HTML pages and some Shodan search
results, it can be reasonably concluded that the following D-Link
devices are likely affected:

DIR-100
DI-524
DI-524UP
DI-604S
DI-604UP
DI-604+
TM-G5240

Additionally, several Planex routers also appear to use the same firmware:

BRL-04UR
BRL-04CW
Click to expand...
 
User agent is interesting read backwards :D

Apparently it's quite old, it was on a Russian website a while ago! Glad I don't have any d-link devices. Saying that, anyone silly enough to have management open on port 80 to the public deserves it :p
 
You must log in or register to reply here.
Back
Top Bottom