【中国】TP-Link製Wi-Fiルーターにバックドア [雷★]

【中国】TP-Link製Wi-Fiルーターにバックドア [雷★] at NEWSPLUS

1:雷 ★
21/04/14 19:56:57.25 4baeOaOe9.net
TP-Link http/tftp backdoor
About the TP-Link Routertp-logo
TP-Link TL-WDR4300 is a popular dual band WiFi, SOHO class router.
Tested Firmware
We tested the remote root PoC on the newest firmware (published on 25.12.2012):
firmware
TL-WDR4300 – tested firmware version
The following info is provided for educational use only! We are also not resposible for any potential damages of the devices which are tested for this vulnerability.
Update: more info about the issues in the router is available here.
Proof of Concept
Update2: it works on WAN port if http admin is open on WAN. Also, many (if not all) other TP-Link devices are affected!
URLﾘﾝｸ(sekurak.pl)

Update2: WAN上でhttpの管理画面が開いていれば、WANポートでも動作します。また、他の多くのTP-Link機器にも影響があります（全てではないにしても）。

レスを読む