RemixedCat's Place of Meow!

The Security company Rapid7 has discovered that the implementation of Universal Plug and Play - a protocol that allows for effortless networking of several types of devices such as game consoles, Digital Video Recorders, IP cameras, media servers, etc. This protocol makes it so the devices do not have to have ports forwarded or a login. However the protocol was designed for local, trusted devices only, however hackers have exploited it for more than a decade. There have been numerous reports about this over the years and this is the first time people are getting serious about it. Please review the lists and the data from the links below to determine if your router is vulnerable. Please click the following link to test your equipment: https://www.grc.com/x/ne.dll?rh1dkyd2 I am thrilled to report that the Amped Wireless R10000 and the R20000G routers are not on the list. here are the links of material pertaining to the vulnerabilities: http://www.pcworld.com/article/2026654/...

Summary: The vulnerability affects 64-bit operating systems and virtualization software running on Intel CPU hardware. The U.S. Computer Emergency Readiness Team (CERT) has issued an alert for a dangerous guest-to-host virtual machine escape vulnerability affecting virtualization software from multiple vendors. The vulnerability, which affects 64-bit operating systems and virtualization software running on Intel CPU hardware, exposes users to local privilege escalation attack or a guest-to-host virtual machine escape. From the advisory : A ring3 attacker may be able to specifically craft a stack frame to be executed by ring0 (kernel) after a general protection exception (#GP). The fault will be handled before the stack switch, which means the exception handler will be run at ring0 with an attacker’s chosen RSP causing a privilege escalation. Affected vendors include Intel Corp., FreeBSD, Microsoft, NetBSD, Oracle, RedHat, SUSE Linux and Xen. The US-CERT advis...