Verizon patches bug for millions of routers that gives hackers complete control over the device - Hallo friendsGOOD OF CONEX NEWS, In the article you read this time with the title Verizon patches bug for millions of routers that gives hackers complete control over the device, We have prepared this article for you to read and retrieve information therein. Hopefully the contents of postings Article health, Article news, Article sport, Article tips, Article treatment, We write this you can understand. Alright, good read.

Title : Verizon patches bug for millions of routers that gives hackers complete control over the device
link : Verizon patches bug for millions of routers that gives hackers complete control over the device

Verizon patches bug for millions of routers that gives hackers complete control over the device

Verizon issues patch for bug affecting millions of routers that gives hackers complete control over the device

• The vulnerability allowed savvy hackers to take control of a top Verizon router
• Verizon's Fios Quantum Gateway router is used by millions of its customers
• The telco giant has since patched the flaw in the latest firmware version

By Annie Palmer For Dailymail.com

Published: 23:41 BST, 9 April 2019 | Updated: 23:42 BST, 9 April 2019

Security researchers have discovered three vulnerabilities in a popular Verizon Fios router model that could have allowed hackers to take full control of the device.

The flaws, discovered by researchers at cybersecurity firm Tenable, affect Verizon's Fios Quantum Gateway router, which is used by millions of customers of the telecommunications giant. 

Verizon patched the bug in its latest software update after researchers tipped them off to the flaws in December.   

Scroll down for video 

Security researchers have discovered three vulnerabilities in a popular Verizon Fios router model that could have allowed hackers to take full control of the device

HOW CAN YOU CHECK IF YOUR ROUTER IS AFFECTED? 

All Verizon routers running firmware version 02.02.00.13 should no longer be vulnerable to attackers. 

However, the firm cautions that a 'small fraction' of devices remain vulnerable.   

Here's how to check if yours is one of them: 

• Open your web browser and enter your router's IP address. 
• Enter the administrative password, which is usually on the router. 
• After logging in, select 'System Monitoring' in the righthand corner.
• Under Firmware Version, it should say which version your router is running. 

While the attacks require a significant amount of effort to carry out, anyone savvy enough can gain root access to the device, giving them full control over it, as well as the ability to view every device connected to the router.

'This type of attack is feasible for an attacker with an intermediate level of skill,' Tenable Senior Researcher Chris Lyne told Threatpost.

'The remote command injection does require the attacker to either know the administrative password or have captured and replayed a previous login request. 

'If remote administration is enabled on the router, the attack can be carried out from anywhere with an internet connection,' he added. 

The attacker would also need to be in range of the device, but if remote administration of the device is enabled, it could be executed remotely, Lyne said.

Lyne discovered the bugs by looking at the Access Control rules in the Firewall settings of the router's API for the web interface.  

After gaining root access to the device, the attacker would be able to inject commands into the operating system. 

The flaws, discovered by researchers at cybersecurity firm Tenable, affect Verizon's Fios Quantum Gateway router, which is used by millions of customers of the telco giant

Researchers discovered two additional vulnerabilities, including the ability to capture a login request. 

These vulnerabilities enable a range of dubious activities to be carried out by attackers, including the ability to compromise smart home devices remotely. 

'An attacker could tamper with the security settings of the device, change firewall rules or remove parental controls,' Tenable said in a statement. 

'They could sniff network traffic to further compromise a victim’s online accounts, steal bank details and swipe passwords.'

Luckily, Verizon resolved the vulnerabilities in firmware version 02.02.00.13. 

Most of the affected devices have been updated to this latest version, but Verizon cautioned that a 'small fraction of devices' remain vulnerable.       

Read more:

Let's block ads! (Why?)

Thus Article Verizon patches bug for millions of routers that gives hackers complete control over the device

That's an article Verizon patches bug for millions of routers that gives hackers complete control over the device This time, hopefully can give benefits to all of you. well, see you in posting other articles.

You are now reading the article Verizon patches bug for millions of routers that gives hackers complete control over the device with the link address https://coneknews.blogspot.com/2019/04/verizon-patches-bug-for-millions-of.html

Tweet

Subscribe to receive free email updates: