article thumbnail

MyBook Users Urged to Unplug Devices from Internet

Krebs on Security

The My Book Live and My Book Live Duo devices received its final firmware update in 2015. “The vulnerability report CVE-2018-18472 affects My Book Live devices originally introduced to the market between 2010 and 2012,” reads a reply from Western Digital that Wizcase posted to its blog.

Internet 303
article thumbnail

WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

Security Affairs

CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Millions of Arris routers are vulnerable to path traversal attacks

Malwarebytes

This web server is present in Arris firmware which can be found in several router models. last official release 2010) has a path traversal vulnerability. Unfortunately the Arris firmware is based on the vulnerable version of muhttpd. Various system and firewall logs. muhttpd web server. The muhttpd server 1.1.5

Firmware 143
article thumbnail

How to Protect Operational Technology (OT) from Cyber Threats

CyberSecurity Insiders

OT systems often come as closed systems with firmware and software installed by a supplier. In practice, however, air-gapping an OT system or firewalling its protected network is only the beginning of hardening its overall security. They are often unknown and dynamic, and, with OT systems firewalls dissolving, coming from more places.

article thumbnail

Millions of Arris routers are vulnerable to path traversal attacks

Malwarebytes

This web server is present in Arris firmware which can be found in several router models. last official release 2010) has a path traversal vulnerability. Unfortunately the Arris firmware is based on the vulnerable version of muhttpd. Various system and firewall logs. muhttpd web server. The muhttpd server 1.1.5

article thumbnail

Zero Trust: Can It Be Implemented Outside the Cloud?

eSecurity Planet

The concept of zero trust has been around since 2010, when Forrester Research analyst John Kindervag created the zero trust security model. They control the firmware, the signing, and the supply chain. That means — and is not limited to — hardware vendors (network, server, storage, firewall, etc.),

article thumbnail

Top 6 Rootkit Threats and How to Protect Yourself

eSecurity Planet

Firmware Rootkit. A firmware rootkit uses device or platform firmware to create a persistent malware image in the router, network card, hard drive or the basic input/output system (BIOS). The rootkit is able to remain hidden because firmware is not usually inspected for code integrity. using strong authentication.

Firmware 109