{"id":20867,"date":"2021-08-02T12:52:20","date_gmt":"2021-08-02T10:52:20","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=20867"},"modified":"2021-08-02T12:53:25","modified_gmt":"2021-08-02T10:53:25","slug":"authentifizierungsschwachstelle-cve-2021-20090-bei-arcadyan-basierten-routern-und-modems","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2021\/08\/02\/authentifizierungsschwachstelle-cve-2021-20090-bei-arcadyan-basierten-routern-und-modems\/","title":{"rendered":"Authentication Vulnerability CVE-2021-20090 in Arcadyan-based Routers and Modems"},"content":{"rendered":"

\"Sicherheit[German<\/a>]Routers and modems from the Taiwan-based manufacturer Arcadyan have a CVE-2021-20090 vulnerability that can be used to bypass authentication. The routers and modems are sold under many trade names by other manufacturers. <\/p>\n

<\/p>\n

\"\"The vulnerability was discovered by Tenable and described in this document<\/a>. The CERT has meanwhile published this security advisory<\/a> for the vulnerability CVE-2021-20090 as of July 20, 2021.<\/p>\n

A path traversal vulnerability (CVE-2021-20090) exists in numerous routers from various vendors that use the Arcadyan-based firmware. This vulnerability allows an unauthenticated user to access sensitive information that is normally protected, and now allows a change to the router configuration.<\/p>\n

If this vulnerability is successfully exploited, an attacker can access pages that would otherwise require authentication. An unauthenticated attacker could gain access to sensitive information, including valid request tokens that could be used to make requests to change router settings.<\/p>\n

The security researcher who discovered the vulnerability initially assumed it was limited to one router vendor and published his findings, but then discovered the problem exists in Arcadyan-based software used in routers from multiple vendors. Tenable has this list of affected devices:<\/p>\n

\n\n\n\n\n<\/colgroup>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Vendor<\/code><\/strong><\/span><\/td>\nDevice<\/code><\/strong><\/span><\/td>\nFound on version<\/code><\/strong><\/span><\/td>\n<\/tr>\n
ADB<\/code><\/td>\nADSL wireless IAD router<\/code><\/td>\n1.26S-R-3P<\/code><\/td>\n<\/tr>\n
Arcadyan<\/code><\/td>\nARV7519<\/code><\/td>\n00.96.00.96.617ES<\/code><\/td>\n<\/tr>\n
Arcadyan<\/code><\/td>\nVRV9517<\/code><\/td>\n6.00.17 build04<\/code><\/td>\n<\/tr>\n
Arcadyan<\/code><\/td>\nVGV7519<\/code><\/td>\n3.01.116<\/code><\/td>\n<\/tr>\n
Arcadyan<\/code><\/td>\nVRV9518<\/code><\/td>\n1.01.00 build44<\/code><\/td>\n<\/tr>\n
ASMAX<\/code><\/td>\nBBR-4MG \/ SMC7908 ADSL<\/code><\/td>\n0.08<\/code><\/td>\n<\/tr>\n
ASUS<\/code><\/td>\nDSL-AC88U (Arc VRV9517)<\/code><\/td>\n1.10.05 build502<\/code><\/td>\n<\/tr>\n
ASUS<\/code><\/td>\nDSL-AC87VG (Arc VRV9510)<\/code><\/td>\n1.05.18 build305<\/code><\/td>\n<\/tr>\n
ASUS<\/code><\/td>\nDSL-AC3100<\/code><\/td>\n1.10.05 build503<\/code><\/td>\n<\/tr>\n
ASUS<\/code><\/td>\nDSL-AC68VG<\/code><\/td>\n5.00.08 build272<\/code><\/td>\n<\/tr>\n
Beeline<\/code><\/td>\nSmart Box Flash<\/code><\/td>\n1.00.13_beta4<\/code><\/td>\n<\/tr>\n
British Telecom<\/code><\/td>\nWE410443-SA<\/code><\/td>\n1.02.12 build02<\/code><\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nWSR-2533DHPL2<\/code><\/td>\n1.02<\/code><\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nWSR-2533DHP3<\/code><\/td>\n1.24<\/code><\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nBBR-4HG<\/code><\/td>\n <\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nBBR-4MG<\/code><\/td>\n2.08 Release 0002<\/code><\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nWSR-3200AX4S<\/code><\/td>\n1.1<\/code><\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nWSR-1166DHP2<\/code><\/td>\n1.15<\/code><\/td>\n<\/tr>\n
Buffalo<\/code><\/td>\nWXR-5700AX7S<\/code><\/td>\n1.11<\/code><\/td>\n<\/tr>\n
Deutsche Telekom<\/code><\/td>\nSpeedport Smart 3<\/code><\/td>\n010137.4.8.001.0<\/code><\/td>\n<\/tr>\n
HughesNet<\/code><\/td>\nHT2000W<\/code><\/td>\n0.10.10<\/code><\/td>\n<\/tr>\n
KPN<\/code><\/td>\nExperiaBox V10A (Arcadyan VRV9517)<\/code><\/td>\n5.00.48 build453<\/code><\/td>\n<\/tr>\n
KPN<\/code><\/td>\nVGV7519<\/code><\/td>\n3.01.116<\/code><\/td>\n<\/tr>\n
O2<\/code><\/td>\nHomeBox 6441<\/code><\/td>\n1.01.36<\/code><\/td>\n<\/tr>\n
Orange<\/code><\/td>\nLiveBox Fibra (PRV3399)<\/code><\/td>\n00.96.00.96.617ES<\/code><\/td>\n<\/tr>\n
Skinny<\/code><\/td>\nSmart Modem (Arcadyan VRV9517)<\/code><\/td>\n6.00.16 build01<\/code><\/td>\n<\/tr>\n
SparkNZ<\/code><\/td>\nSmart Modem (Arcadyan VRV9517)<\/code><\/td>\n6.00.17 build04<\/code><\/td>\n<\/tr>\n
Telecom (Argentina)<\/code><\/td>\nArcadyan VRV9518VAC23-A-OS-AM<\/code><\/td>\n1.01.00 build44<\/code><\/td>\n<\/tr>\n
TelMex<\/code><\/td>\nPRV33AC<\/code><\/td>\n1.31.005.0012<\/code><\/td>\n<\/tr>\n
TelMex<\/code><\/td>\nVRV7006<\/code><\/td>\n <\/td>\n<\/tr>\n
Telstra<\/code><\/td>\nSmart Modem Gen 2 (LH1000)<\/code><\/td>\n0.13.01r<\/code><\/td>\n<\/tr>\n
Telus<\/code><\/td>\nWiFi Hub (PRV65B444A-S-TS)<\/code><\/td>\nv3.00.20<\/code><\/td>\n<\/tr>\n
Telus<\/code><\/td>\nNH20A<\/code><\/td>\n1.00.10debug build06<\/code><\/td>\n<\/tr>\n
Verizon<\/code><\/td>\nFios G3100<\/code><\/td>\n1.5.0.10<\/code><\/td>\n<\/tr>\n
Vodafone<\/code><\/td>\nEasyBox 904<\/code><\/td>\n4.16<\/code><\/td>\n<\/tr>\n
Vodafone<\/code><\/td>\nEasyBox 903<\/code><\/td>\n30.05.714<\/code><\/td>\n<\/tr>\n
Vodafone<\/code><\/td>\nEasyBox 802<\/code><\/td>\n20.02.226<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

The CERT\/CC recommends updating the router to the latest available firmware version. It is also recommended to disable the remote administration services (WAN side) on each SoHo router and also disable the web interface on the WAN.<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Routers and modems from the Taiwan-based manufacturer Arcadyan have a CVE-2021-20090 vulnerability that can be used to bypass authentication. The routers and modems are sold under many trade names by other manufacturers.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[448,580],"tags":[587,69],"class_list":["post-20867","post","type-post","status-publish","format-standard","hentry","category-devices","category-security","tag-router","tag-security"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/20867","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=20867"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/20867\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=20867"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=20867"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=20867"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}