View Single Post
  #1  
Old 2008-02-05, 02:33 AM
Positive Friction Positive Friction is offline
 
Join Date: Feb 2006
Icon4 FYI: Severe UPnP Flaw Allows Router Hijacking

Just a headsup for everyone as I know I missed this news last month.

http://www.informationweek.com/news/...leID=205800419

"A vulnerability in networking devices that support UPnP (Universal Plug and Play) can be exploited through a malicious SWF (Flash) file on a Web site, US-CERT warned Monday.

Visiting such a Web site may allow an attacker to reconfigure or take over devices connected to the victim's system that support UPnP. This includes routers, cameras, printers, mobile phones, and digital entertainment systems...Successfully executing the attack allows the attacker to take over the affected router, allowing him or her to bypass firewalls, access Web router administration pages, attack Internet hosts through the router, and alter networking settings."
Reply With Quote Reply with Nested Quotes