Saturday, October 11, 2014

DEFCON Router Hacking Contest Reveals 15 Major Vulnerabilities



According to the rules of the contest, an entry wasn't considered valid unless the contestant also showed proof of disclosure to the manufacturer. Here's a full list of routers in which 0-days were reported in Track 0, along with our current understanding of the fix in progress:

  • ASUS AC66U; reported, but no response from the manufacturer.
  • Netgear WNDR4700; reported, but no response from the manufacturer.
  • D-LINK 865L; reported, and manufacturer confirms it is working on a fix, currently in beta.
  • Belkin N900; reported, and manufacturer acknowledgedbut was unclear on providing a fix.
  • TRENDnet TEW-812DRU; reported, and manufacturer claims all reported 0-days are fixed.
  • Actiontec Q1000; reported, and manufacturer acknowledged the report.

For details please see the full contest results.

No comments:

Post a Comment