Backdoor found in Netis or Netcore Routers, Check for yours NOW!

October 13th, 2014

Home / Safety Tips / Backdoor found in Netis or Netcore Routers, Check for yours NOW!

Backdoor found in Netis or Netcore Routers, Check for yours NOW!Share2

Netis Routers

Maybe you are using a router of the Chinese company Netcore, which is also known as Netis outside the china and if yes you are using the same router device that I am talking about, so beware from now, as your network can be hacked by an attacker any time.

Router manufactured by the company named Netcore or Netis has a backdoor that can easily run arbitrary code on these routers, rendering it vulnerable as a security device.

According to the Trend Micro, after successfully gaining access inside the router, an attacker can easily run malicious code on routers and change settings.

If we talk more about the company speciality, so it is the best known company that is providing the best wireless transfer speed up to 300Mbps, offering a better performance on online gaming, video streaming, and VoIP phone calling.

In simple words, the vulnerability in the router is an open UDP port listening at port 53413 in the router. This port is accessible from the WAN side of the router. This means that if the router in question has an externally accessible IP address (i.e., almost all residential and SMB users), an attacker from anywhere on the Internet can access this backdoor:
netstat

Upon further more research on this issue, Trend Micro found that This backdoor is “protected” by a single, hardcoded password located in the router’s firmware, which is remain same for all the routers and the scary thing is— users cannot modify or disable this backdoor.

Entry Filed under: All

Leave a Comment

Required

Required, hidden

Some HTML allowed:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Trackback this post  |  Subscribe to the comments via RSS Feed


Calendar

October 2014
M T W T F S S
« Sep   Nov »
 12345
6789101112
13141516171819
20212223242526
2728293031  

Most Recent Posts