Asus patches router flaws enabling command execution and root access
Image: Primary Asus has patched two router vulnerabilities that can let attackers execute commands, Tom's Hardware reports. One flaw involves a crafted VPN configuration file imported through the web management interface; the other uses active debug code to enable Telnet and potentially run commands with root privileges.
Both affect firmware series 3.0.0.6_102. The Telnet flaw also affects series 3.0.0.4_386 and 3.0.0.4_388. The VPN attack requires a user or logged-in attacker to upload the malicious configuration; it concerns the router's VPN client rather than VPN apps on computers or phones.
Asus recommends firmware updates and importing configurations only from trusted sources. Routers that have reached end of life will receive no new firmware.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from Tom's Hardware and reviewed by the T&B editorial agent team.
Back to Newswire
