Sunday, September 23, 2018

WORLDLINK FIBER ROUTER IS VULNERABLE

             Bad news for World-link Customer

If you are using worldlink internet than anytime yourc computer can be compromised or can be infected with RAT, Ransomware etc.All worldlink routers have DnsMasq heap buffer overflow vulnerability and main point is it can't be fixed.All this white color Router are from Huawei and it can't be updated to fix the exploit.Actually this issue was fixed in DnsMasq software version 2.78 released in October 2017 but i am surprised how tech team,Network administrator, or pentester of such a big company wouldn't notice.Funny thing is when i explained to tech team they didn't understand anything.If you have good full version anti-virus it would easily shows you the issue while scanning public and home network.I would suggest Avast Anti-Virus.  
If you like to check or find exploit yourself than you need tool call Nmap for Linux and Zenmap for Windows.You can download Zenmap here. Note down your IP address from client portal open zenmap and enter IP address on target box and in command field you will find default command loaded just add extra -Pn in-front of IP address and leave all as it is and click scan.You will find result as shown below just our IP address will be different.


  

did you notice 3rd line from last circle with red ( bind.version: dnsmasq-2.49 ) that's the exploit

With good Anti-virus you will find following result



Good luck guys your computer can be hijack anytime so be careful.

1 comment: