華碩Router用戶小心被入侵

Satomi

http://arstechnica.com/security/ ... ily-exploited-flaw/

"The vulnerability is that on many, if not on almost all N66U units that have enabled https Web service access via the AiCloud feature, [they] are vulnerable to un-authenticated directory traversal and full sensitive file disclosure," Lovett wrote in his earlier dispatch. "Any of the AiCloud options 'Cloud Disk,' 'Smart Access,' and 'Smart Sync' (need another verification on this one) appear to enable this vulnerability."

我唔係華碩用戶, 請大家自己小心留意

mouseman

I do not use AiCloud, seems similar to that Synology issue

Advanced Ivan

我唔係華碩用戶, 請大家自己小心留意
Satomi 發表於 2014-2-18 15:34

ASUS RT-N66U韌體版本3.0.0.4.374.4422
安全性相關問題:
1. 修正lighthttpd漏洞。
2. 修正了跨網站指令碼漏洞(CWE-79)。
3. 修正身分驗證機制CWW-592）。
4. 避免安全性的疑慮，增加提示訊息通知。
5. 修正網路芳鄰(Samba)和FTP漏洞。

改善:
1. 重新設計家長控制時間設置界面。
2. 更新多國語言字串。
3. 調整韌體檢查的驗算法。
4. 調整時區偵測的驗算法。
5. 增強的Web用戶界面的性能。

我Up咗啦......
Up完多咗幾個Warning, 話我唔可以再用Default嘅password, 一定要我改......

~你好嗎~

http://www.asus.com/microsite/2014/networks/routerfirmware_update/

都算快手同負責
咁快有update

sna

FW_RT_N16_3.0.0.4.374.4561
有冇人用緊呢隻？

talcans

回復 6# sna

Using it now

justkeny2k

RT-N16 update左
但個webUI反應慢左好多

ptolys

回復 6# sna

我 N56U 都用緊 4561. 之前用4422 firefox 成日 hang

jk47

consider purchase n56u, safe to use?