Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




29026 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

#232107 29-Mar-2018 21:09
Send private message

If anybody on here runs any Mikrotik hardware it's worth reminding you to keep it up to date and secured.

 

There is a major exploit in the wild today affecting hardware. I've seen compromised devices today and am aware of a number of devices found in NZ on a number of RSP's that have been compromised.

 

Full details are on the Mikrotik website - you should be running 6.38.5 at a *bare* minimum. 6.41.3 may also reduce exposure to this threat.

 

https://forum.mikrotik.com/viewtopic.php?f=21&t=132499

 

If you're running anything below 6.38.5 and had port 80 for Webfig open to the Internet there is a real possibility your router could have already been compromised.

 

 


Create new topic
4542 posts

Uber Geek

Trusted

  #1985702 29-Mar-2018 21:25
Send private message

Its a bit of a worry that sites would be running less than 6.38.5.
And from the email MT sent out said it exploits webfig or winbox. Which I would also question why anyone would just expose those outright to the internet.
I can understand core routers not being upgraded, but they sure as hell shouldn't have config ports open to the world!

463 posts

Ultimate Geek


  #1985784 29-Mar-2018 22:54
Send private message

Unfortunately there is a strong correlation between "can't configure a firewall" and "doesn't bother patching".

 

Some shodan stats for NZ.

 

958 - SNMP open
648 - Telnet open
189 - Telnet open but mapped to port 2323 (l33t!)
1148 - FTP open

 

I couldn't find an accurate way to measure webfig numbers, but plenty of these boxes had http servers on port 80 or 8080.

 

Here's a report including the versions reported by the FTP daemon.

 

https://www.shodan.io/report/u8fl5g3P


Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Nokia 2.3 brings to be available in New Zealand
Posted 6-Jul-2020 12:30


Menulog change colours as parent company merges with Dutch food delivery service
Posted 2-Jul-2020 07:53


Techweek2020 goes digital to make it easier for Kiwis to connect and learn
Posted 2-Jul-2020 07:48


Catalyst Cloud launches new Solutions Hub to support their kiwi Partners and Customers
Posted 2-Jul-2020 07:44


Microsoft to help New Zealand job seekers acquire new digital skills needed for the COVID-19 economy
Posted 2-Jul-2020 07:41


Hewlett Packard Enterprise introduces new HPE GreenLake cloud services
Posted 24-Jun-2020 08:07


New cloud data protection services from Hewlett Packard Enterprise
Posted 24-Jun-2020 07:58


Hewlett Packard Enterprise unveils HPE Ezmeral, new software portfolio and brand
Posted 24-Jun-2020 07:10


Apple reveals new developer technologies to foster the next generation of apps
Posted 23-Jun-2020 15:30


Poly introduces solutions for Microsoft Teams Rooms
Posted 23-Jun-2020 15:14


Lenovo launches new ThinkPad P Series mobile workstations
Posted 23-Jun-2020 09:17


Lenovo brings Linux certification to ThinkPad and ThinkStation Workstation portfolio
Posted 23-Jun-2020 08:56


Apple introduces new features for iPhone iOS14 and iPadOS 14
Posted 23-Jun-2020 08:28


Apple announces Mac transition to Apple silicon
Posted 23-Jun-2020 08:18


OPPO A72 a top mid-tier smartphone
Posted 19-Jun-2020 18:02



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.