Krebs on Security
JUNE 25, 2021
Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.
Security Affairs
NOVEMBER 29, 2020
out of 10 in severity by the industry-standard Common Vulnerability Scoring System (CVSS) and impacts all versions of EtherNet/IP Adapter Source Code Stack prior to 2.28, which was released on November 21, 2012. Tracked as CVE-2020-25159 , the flaw is rated 9.8 This would leave many running in the wild still today.”
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Malwarebytes
APRIL 28, 2022
In real life this usually means they are used as an external hard-drive that can be accessed over an intranet or the Internet. of Netatalk was released in July 2012. Western Digital removed Netatalk from its firmware, released on January 10, 2022. Version 3.0 with a new feature and several security updates. Not just QNAP.
Security Affairs
MAY 19, 2020
“There is no evidence to support any other firmware versions are vulnerable at this point in time and these findings have been shared with Symantec.” Experts note that the exploit is only effective for authenticated sessions and the affected devices are End of Life (EOL) from 2012. ” concludes Palo Alto Networks.
Security Affairs
MAY 16, 2023
China-linked APT group Mustang Panda employed a custom firmware implant targeting TP-Link routers in targeted attacks since January 2023. MustangPanda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican.
Security Affairs
OCTOBER 20, 2018
CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.
SecureList
OCTOBER 25, 2023
This archive is discreetly hosted on legitimate websites, cleverly disguised as firmware binaries for enigmatic devices labeled “m100” The Bitbucket repository was created on June 21, 2018, under the account of Julie Heilman, and it remains the sole repository associated with this profile. 8, 10.0.0.0/8, 8, 100.64.0.0/10,
Expert insights. Personalized for you.
303 
Let's personalize your content