 |
| Critical Vulnerability in Outdated D-Link DIR-859 Router Exposes Users to Data Theft Image credit: D-Link website |
Cybersecurity researchers from GreyNoise have reported that threat actors are exploiting a critical vulnerability in outdated D-Link DIR-859 Wi-Fi routers to steal sensitive data. The vulnerability, known as a path traversal flaw and tracked as CVE-2024-0769, was first discovered in January 2024 and has a severity score of 9.8/10.
The attackers are targeting the ‘DEVICE.ACCOUNT.xml’ file to access account names, passwords, user groups, and user descriptions stored on the device. Unfortunately, the DIR-859 router reached its end-of-life in early 2020, meaning D-Link will not issue a patch for this flaw. Users are advised to replace the hardware with a newer model that still receives vendor support.
D-Link has issued a security advisory warning about another vulnerability in the ‘fatlady.php’ component, which affects all firmware versions and allows threat actors to escalate privileges and gain full control of the device through the admin panel. However, GreyNoise researchers have subtly criticized D-Link for issuing advisories without providing patches, deeming such actions as ineffective.
They emphasized that the disclosed information will remain valuable to attackers as long as the device remains connected to the internet. This situation should serve as a warning to users, motivating them to upgrade to newer devices or take responsibility for potential data breaches.
0 Comments