Krebs on Security
JUNE 25, 2021
Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.
Schneier on Security
FEBRUARY 19, 2021
Nonetheless, all but one vendor spread several private keys in almost all firmware images. was released in October 2010. There’s often no one around to write patches, and most of the time router firmware isn’t even patchable. Anyhow, they are used quite rarely by most vendors except the NX feature.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
SecureList
JUNE 8, 2022
A router is a gateway from the internet to a home or office — despite being conceived quite the opposite. Number of router vulnerabilities according to cve.mitre.org, 2010–2022 ( download ). Number of router vulnerabilities according to nvd.nist.gov, 2010–2022 ( download ). Make sure to update the firmware. Conclusion.
Security Affairs
FEBRUARY 15, 2020
The protocol Bluetooth Low Energy (BLE) was released in 2010 and it is designed to implement a new generation of services for mobile applications. The issue initially causes denial of service ( DoS ), but “attackers could reverse engineer products firmware to possibly leverage remote execution,” the researchers say.
Security Affairs
OCTOBER 20, 2018
CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.
Malwarebytes
AUGUST 1, 2022
This web server is present in Arris firmware which can be found in several router models. ISP customer premise equipment (CPE) often uses this web server, and ISP subscribers will typically get these routers in loan for telephony and Internet access. last official release 2010) has a path traversal vulnerability.
Malwarebytes
AUGUST 1, 2022
This web server is present in Arris firmware which can be found in several router models. ISP customer premise equipment (CPE) often uses this web server, and ISP subscribers will typically get these routers in loan for telephony and Internet access. last official release 2010) has a path traversal vulnerability.
Expert insights. Personalized for you.
296 
Let's personalize your content