ASUS Wireless router leaves USB Storage Devices vulnerable to remote attackers

Docok

Özel Üye
3 Haz 2011
2,680
22
KKTC, Lapta
ASUS+Router.png

In this era of Computers and Smartphones, where we are connected to the Internet every second and use it almost for everything.

For an Internet connection, one has to plug a device called Router between the ISP (Internet Service Provider) and device. Some Routers are available with USB option, where you can attach an external Hard Disk that allows files to be stored and retrieved across a computer network.

Asus one of the largest IT hardware manufacturer providing these kind of devices by which you can connect to the internet and make your external hard disk available on the Internet as FTP server just by configuring AiDisk utility from the router’s administrator panel.

Many ASUS Routers have this feature available, including models: RT-N66U, RT-N56U, RT-N15U, RT-N65U, RT-AC66U, DSL-N55U and RT-N16.

Recently a vulnerability has been noticed by some Sweden users in the ASUS Routers, that allows an attacker to access your Hard Disk remotely from any part of the world, could result in complete system compromise, exposing your private pictures and files.

Enabling the AiDisk utility from Router makes the device available for using it through the public Internet, this feature comes with a problem if kept in default configuration which is giving Limitless access to your storage device.

If you have some movies or cracked softwares downloaded from Torrents, by this you might become a criminal by delivering Pirated Content over the Internet and even you don’t have any such information.

Hacking+Routers.jpg

ASUS is now aware of the issue and they intend to release an update, to warn their users with recommendation to choose a strong password for device storage and Router Administrative panel.
 
Üst

Turkhackteam.org internet sitesi 5651 sayılı kanun’un 2. maddesinin 1. fıkrasının m) bendi ile aynı kanunun 5. maddesi kapsamında "Yer Sağlayıcı" konumundadır. İçerikler ön onay olmaksızın tamamen kullanıcılar tarafından oluşturulmaktadır. Turkhackteam.org; Yer sağlayıcı olarak, kullanıcılar tarafından oluşturulan içeriği ya da hukuka aykırı paylaşımı kontrol etmekle ya da araştırmakla yükümlü değildir. Türkhackteam saldırı timleri Türk sitelerine hiçbir zararlı faaliyette bulunmaz. Türkhackteam üyelerinin yaptığı bireysel hack faaliyetlerinden Türkhackteam sorumlu değildir. Sitelerinize Türkhackteam ismi kullanılarak hack faaliyetinde bulunulursa, site-sunucu erişim loglarından bu faaliyeti gerçekleştiren ip adresini tespit edip diğer kanıtlarla birlikte savcılığa suç duyurusunda bulununuz.