26 Aralık 2020 Cumartesi

Misfortune Cookie (CVE-2014-9222) NEDIR?


Selam Bugün sizlere 12 Milyon Adsl Modem, Kablo Modem,Kablosuz Router,Switch Kablosuz Acces Pointleri etkilemiş olan oldukça kritik bir güvenlik açığından bahsedecem.Bu Zafiyetrouterlarda web arayüzü sunmak için kullanılan Allegro Rompager adlı gömülü web server uygulamasında bulunuyor. Bu zafiyetten yararlanılarak saldırgan heçkırlar modem arayüzünüze hiçbir şifre vb girmeden login olabiliyor. Saldırgan heçkır router arayüzünüze giriş yaptıktan sonra dilediğini gerçekleştirebiliyor zaten isterse modem şifrenizi değiştirir isterse başka şey yapar bu yüzden çok kritik önem taşır.

Peki Nasıl Korunuruz Hocam?

Şimdi bak kanka korunmak çok basit zaten bunun 2 tane yolu var:

  • Eğer cihazında firmware güncellemesi varsa cihaz üreticisinin sitesinden yüklemek.
  •  Yoksa da çözüm çok basit yeni bir cihaz satın al bu kadar basit kanka 😂

  • Cihazımda Misfortune Cookie Varmı?
    Cihazınızın yazının en altında verdiğim açıklı cihazlar listesinde olup olmadığını kontrol edebilirsiniz.

    Saldırı Videosu:

    Açıklı Cihazlar Listesi:
    • 110TC2 Beetel
    • 16NX073012001 Nilox
    • 16NX080112001 Nilox
    • 16NX080112002 Nilox
    • 16NX081412001 Nilox
    • 16NX081812001 Nilox
    • 410TC1 Beetel
    • 450TC1 Beetel
    • 450TC2 Beetel
    • 480TC1 Beetel
    • AAM6000EV/Z2 ASUS
    • AAM6010EV ASUS
    • AAM6010EV/Z2 ASUS
    • AAM6010EV-Z2 ASUS
    • AAM6020BI ASUS
    • AAM6020BI-Z2 ASUS
    • AAM6020VI/Z2 ASUS
    • AD3000W starnet
    • ADSL Modem Unknown
    • ADSL Modem/Router Unknown
    • ADSL Router BSNL
    • AirLive ARM201 AirLive
    • AirLive ARM-204 AirLive
    • AirLive ARM-204 Annex A AirLive
    • AirLive ARM-204 Annex B AirLive
    • AirLive WT-2000ARM AirLive
    • AirLive WT-2000ARM Annex A AirLive
    • AirLive WT-2000ARM Annex B AirLive
    • AMG1001-T10A ZyXEL
    • APPADSL2+ Approx
    • APPADSL2V1 Approx
    • AR-7182WnA Edimax
    • AR-7182WnB Edimax
    • AR-7186WnA/B Edimax
    • AR-7286WNA Edimax
    • AR-7286WnB Edimax
    • Arcor-DSL WLAN-Modem 100 Arcor
    • Arcor-DSL WLAN-Modem 200 Arcor
    • AZ-D140W Azmoon
    • Billion Sky Billion
    • BiPAC 5102C Billion
    • BiPAC 5102S Billion
    • BiPAC 5200S Billion
    • BIPAC-5100 ADSL Router Billion
    • BLR-TX4L Buffalo
    • BW554 SBS
    • C300APRA2+ Conceptronic
    • Compact Router ADSL2+ Compact
    • D-5546 den-it
    • D-7704G den-it
    • Delsa Telecommunication Delsa
    • D-Link_DSL-2730R D-Link
    • DM 856W Binatone
    • DSL-2110W D-Link
    • DSL-2120 D-Link
    • DSL-2140 D-Link
    • DSL-2140W D-Link
    • DSL-2520U D-Link
    • DSL-2520U_Z2 D-Link
    • DSL-2600U D-Link
    • DSL-2640R D-Link
    • DSL-2641R D-Link
    • DSL-2680 D-Link
    • DSL-2740R D-Link
    • DSL-320B D-Link
    • DSL-321B D-Link
    • DSL-3680 D-Link
    • DT 815 Binatone
    • DT 820 Binatone
    • DT 845W Binatone
    • DT 850W Binatone
    • DWR-TC14 ADSL Modem Unknown
    • EchoLife HG520s Huawei
    • EchoLife Home Gateway Huawei
    • EchoLife Portal de Inicio Huawei
    • GO-DSL-N151 D-Link
    • HB-150N Hexabyte
    • HB-ADSL-150N Hexabyte
    • Hexabyte ADSL Hexabyte
    • Home Gateway Huawei
    • iB-LR6111A iBall
    • iB-WR6111A iBall
    • iB-WR7011A iBall
    • iB-WRA150N iBall
    • iB-WRA300N iBall
    • iB-WRA300N3G iBall
    • IES1248-51 ZyXEL
    • KN.3N Kraun
    • KN.4N Kraun
    • KR.KQ Kraun
    • KR.KS Kraun
    • KR.XL Kraun
    • KR.XM Kraun
    • KR.XM\t Kraun
    • KR.YL Kraun
    • Linksys BEFDSR41W Linksys
    • LW-WAR2 LightWave
    • M-101A ZTE
    • M-101B ZTE
    • M-200 A ZTE
    • M-200 B ZTE
    • MN-WR542T Mercury
    • MS8-8817 SendTel
    • MT800u-T ADSL Router BSNL
    • MT880r-T ADSL Router BSNL
    • MT882r-T ADSL Router BSNL
    • MT886 SmartAX
    • mtnlbroadband MTNL
    • NetBox NX2-R150 Nilox
    • Netcomm NB14 Netcomm
    • Netcomm NB14Wn Netcomm
    • NP-BBRsx Iodata
    • OMNI ADSL LAN EE(Annex A) ZyXEL
    • P202H DSS1 ZyXEL
    • P653HWI-11 ZyXEL
    • P653HWI-13 ZyXEL
    • P-660H-D1 ZyXEL
    • P-660H-T1 v3s ZyXEL
    • P-660H-T3 v3s ZyXEL
    • P-660HW-D1 ZyXEL
    • P-660R-D1 ZyXEL
    • P-660R-T1 ZyXEL
    • P-660R-T1 v3 ZyXEL
    • P-660R-T1 v3s ZyXEL
    • P-660R-T3 v3 ZyXEL
    • P-660R-T3 v3s ZyXEL
    • P-660RU-T1 ZyXEL
    • P-660RU-T1 v3 ZyXEL
    • P-660RU-T1 v3s ZyXEL
    • P-660RU-T3 v3s ZyXEL
    • PA-R11T Solwise
    • PA-W40T-54G PreWare
    • Cerberus P 6311-072 Pentagram
    • PL-DSL1 PreWare
    • PN-54WADSL2 ProNet
    • PN-ADSL101E ProNet
    • Portal de Inicio Huawei
    • POSTEF-8840 Postef
    • POSTEF-8880 Postef
    • Prestige 623ME-T1 ZyXEL
    • Prestige 623ME-T3 ZyXEL
    • Prestige 623R-A1 ZyXEL
    • Prestige 623R-T1 ZyXEL
    • Prestige 623R-T3 ZyXEL
    • Prestige 645 ZyXEL
    • Prestige 645R-A1 ZyXEL
    • Prestige 650 ZyXEL
    • Prestige 650H/HW-31 ZyXEL
    • Prestige 650H/HW-33 ZyXEL
    • Prestige 650H-17 ZyXEL
    • Prestige 650H-E1 ZyXEL
    • Prestige 650H-E3 ZyXEL
    • Prestige 650H-E7 ZyXEL
    • Prestige 650HW-11 ZyXEL
    • Prestige 650HW-13 ZyXEL
    • Prestige 650HW-31 ZyXEL
    • Prestige 650HW-33 ZyXEL
    • Prestige 650HW-37 ZyXEL
    • Prestige 650R-11 ZyXEL
    • Prestige 650R-13 ZyXEL
    • Prestige 650R-31 ZyXEL
    • Prestige 650R-33 ZyXEL
    • Prestige 650R-E1 ZyXEL
    • Prestige 650R-E3 ZyXEL
    • Prestige 650R-T3 ZyXEL
    • Prestige 652H/HW-31 ZyXEL
    • Prestige 652H/HW-33 ZyXEL
    • Prestige 652H/HW-37 ZyXEL
    • Prestige 652R-11 ZyXEL
    • Prestige 652R-13 ZyXEL
    • Prestige 660H-61 ZyXEL
    • Prestige 660HW-61 ZyXEL
    • Prestige 660HW-67 ZyXEL
    • Prestige 660R-61 ZyXEL
    • Prestige 660R-61C ZyXEL
    • Prestige 660R-63 ZyXEL
    • Prestige 660R-63/67 ZyXEL
    • Prestige 791R ZyXEL
    • Prestige 792H ZyXEL
    • RAWRB1001 Reconnect
    • RE033 Roteador
    • RTA7020 Router Maxnet
    • RWS54 Connectionnc
    • SG-1250 Everest
    • SG-1500 Everest
    • SmartAX SmartAX
    • SmartAX MT880 SmartAX
    • SmartAX MT882 SmartAX
    • SmartAX MT882r-T SmartAX
    • SmartAX MT882u SmartAX
    • Sterlite Router Sterlite
    • Sweex MO300 Sweex
    • T514 Twister
    • TD811 TP-Link
    • TD821 TP-Link
    • TD841 TP-Link
    • TD854W TP-Link
    • TD-8616 TP-Link
    • TD-8811 TP-Link
    • TD-8816 TP-Link
    • TD-8816 1.0 TP-Link
    • TD-8816 2.0 TP-Link
    • TD-8816B TP-Link
    • TD-8817 TP-Link
    • TD-8817 1.0 TP-Link
    • TD-8817 2.0 TP-Link
    • TD-8817B TP-Link
    • TD-8820 TP-Link
    • TD-8820 1.0 TP-Link
    • TD-8840T TP-Link
    • TD-8840T 2.0 TP-Link
    • TD-8840TB TP-Link
    • TD-W8101G TP-Link
    • TD-W8151N TP-Link
    • TD-W8901G TP-Link
    • TD-W8901G 3.0 TP-Link
    • TD-W8901GB TP-Link
    • TD-W8901N TP-Link
    • TD-W8951NB TP-Link
    • TD-W8951ND TP-Link
    • TD-W8961N TP-Link
    • TD-W8961NB TP-Link
    • TD-W8961ND TP-Link
    • T-KD318-W MTNL
    • TrendChip ADSL Router BSNL
    • UM-A+ Asotel
    • Vodafone ADSL Router BSNL
    • vx811r CentreCOM
    • WA3002-g1 BSNL
    • WA3002G4 BSNL
    • WA3002-g4 BSNL
    • WBR-3601 LevelOne
    • WebShare 111 WN Atlantis
    • WebShare 141 WN Atlantis
    • WebShare 141 WN+ Atlantis
    • Wireless ADSL Modem/Router Unknown
    • Wireless-N 150Mbps ADSL
    • Router BSNL
    • ZXDSL 831CII ZTE
    • ZXDSL 831II ZTE
    • ZXHN H108L ZTE
    • ZXV10 W300 ZTE
    • ZXV10 W300B ZTE
    • ZXV10 W300D ZTE
    • ZXV10 W300E ZTE
    • ZXV10 W300S ZTE
    Referanslar:

    1 yorum: