Alert: D-Link Router Vulnerabilities Added to CISA’s Exploited List – Urgent Update Recommended!

Hot Take:

Looks like D-Link routers are throwing it back to 2014 with a vintage vulnerability making headlines again! Meanwhile, Ivanti is just trying to keep up with patches like a cat chasing its own tail. It’s like a cybersecurity soap opera – “Days of Our Patches.” Will our devices ever be secure, or are these updates just a never-ending game of Whac-A-Mole?

• CISA added two D-Link router vulnerabilities to its KEV catalog: CVE-2014-100005 (CSRF) and CVE-2021-40655 (information disclosure).
• No current details on how these vulnerabilities are exploited in the wild, but fixes need to be applied by 2024.
• SSD Secure Disclosure highlighted unpatched issues in DIR-X4860 routers, allowing complete device compromise.
• D-Link acknowledged the new issues, with fixes still in development.
• Ivanti EPMM also faces vulnerabilities, with patches released for a command execution flaw and SQL injection issues.

Need to know more?

Router Rodeo: Throwback Edition

Imagine finding out your router’s security is stuck in 2014. That’s the reality for D-Link users facing vulnerabilities that are almost a decade old. CVE-2014-100005 lets attackers play puppet master with your router settings, provided they hijack an admin session. Meanwhile, CVE-2021-40655 is like handing out your Wi-Fi password on a silver platter, allowing attackers to snag credentials just by crafting a fancy HTTP request. It’s not just old tech that’s problematic, as the recent issues in DIR-X4860 routers show, proving that new tech can be just as troublesome.

Unpatched and Overexposed

The SSD Secure Disclosure team must feel like cybersecurity paparazzi, exposing unpatched flaws in D-Link’s newer router models. They’ve even provided a proof-of-concept exploit that turns the router’s management interface into a hacker’s playground. This exploit combines authentication bypass with command execution, allowing attackers to gain root access and commandeer the device. D-Link’s response? They’re on it, but no fix yet. It’s like promising to diet “starting tomorrow.”

Ivanti’s Patch Parade

Not to be outdone, Ivanti has its own set of problems with the EPMM system. They’ve patched a vulnerability that could let attackers execute arbitrary commands through a malicious RPM package. It seems there’s a bit of a theme here with command execution vulnerabilities. Ivanti also patched up some SQL injection vulnerabilities that could let privileged users play fast and loose with the database. It’s like cybersecurity whack-a-mole, but with patches instead of a padded hammer.

As we navigate this labyrinth of vulnerabilities and patches, it’s clear that the cybersecurity world is as dynamic and dramatic as ever. Whether it’s legacy devices or the latest tech, threats are lurking everywhere, and staying updated is not just recommended; it’s essential. So, let’s buckle up and keep our software updated, unless you enjoy playing digital Russian roulette with your data security.