For those who do not know linksys is a manufacturer of networking equipment for small offices and homes. They make network hubs, routers, and network cards.For example, linksys' managed switches include features for rapid network expansion. The STP and Storm Control protocol features help control planned or unintended cable loops linksys help protect the network with port authentication which requires clients to authenticate themselves before they start working, clients must authenticate themselves before transmitting any data.
So what are the vulnerabilities of this equipment ?
Here are some cve
For example, there is CVE-2022-38555 it is a
buffer overflow vulnerability in Linksys E1200 already has a poc or CVE-2020-35713 remote pre-authentication code execution in Linksys RE6500 already has an exploit for it too . More details about the attacks in the archive below 🩸
Now about TP-LINK - it is also a supplier of Wi-Fi routers for home and office and one of the largest manufacturers of network equipment.I will also tell you about some cve of their equipment
For example CVE-2022-30075 -
importing a malicious backup file via web interface can lead to remote code execution due to wrong checks , there is an exploit for it or CVE-2022-24355 this is RCE vulnerability, i.e. it allows intruders in neighboring network to run arbitrary code on router installations . No authentication is required to exploit this vulnerability. The problem arises because there is no proper length check on user data before it is copied to a fixed-length stack buffer. An attacker can use this vulnerability to execute code in a root context.
Read more about it linkAnd I think that's it .
In this post we have analyzed types of attacks and some hardware vulnerabilities.
Read more in the archive below🌟 .There will be more articles about the attacks in the future.
Thank you for reading❤️
Remember Alice, there is a rabbit hole in the looking glass, so follow the rabbit 🐇🎀
#network #wifi #attacks #cve #exploit #dos #traffic_analysis #router