New Security Issue - Sercomm Backdoor

[sfx2000]

Sercomm is an OEM/ODM for Linksys, Netgear, and many others...

Looks like they have a backdoor/factory test mode on TCP/32764 that is not authenticated.

More info here:

https://github.com/elvanderb/TCP-32764

http://www.net-security.org/secworl...ign=Feed:+HelpNetSecurity+(Help+Net+Security)

http://nakedsecurity.sophos.com/201...soho-routers-from-linksys-netgear-and-others/

Expect some firmware updates soon...

WikiDevi Link here - show's different devices made by Sercomm

http://wikidevi.com/w/index.php?title=Special:Ask&q=[[Manuf%3A%3ASerComm]]+[[Global+type%3A%3A~embedded*]]&po=%3FFCC+ID%0D%0A%3FFCC+approval+date%3DFCC+date%0D%0A%3FEstimated+date+of+release%3DEst.+release+date%0D%0A%3FEmbedded+system+type%0D%0A%3FCPU1+brand%0D%0A%3FCPU1+model%3DCPU1+mdl.%0D%0A&eq=yes&p[format]=broadtable&sort_num=&order_num=ASC&p[limit]=500&p[offset]=&p[link]=all&p[sort]=&p[headers]=show&p[mainlabel]=&p[intro]=&p[outro]=&p[searchlabel]=%E2%80%A6+further+results&p[default]=&p[class]=sortable+wikitable+smwtable&eq=yes

 

[stevech]

what about the manufacturer-managed (cloud) vulnerabilities of much newer products?

 

[sfx2000]

what about the manufacturer-managed (cloud) vulnerabilities of much newer products?

Probably a good reason not to use the cloud capabilities of newer manufacturer-managed cloud features...

Just saying...