CVE-2019-15126 (Kr00k) Vulnerability in ASUS DSL Routers

[UK Sentinel]

CVE-2019-15126 (Kr00k) Vulnerability in  ASUS DSL Routers

Ok, so I spoke with ASUS regarding the CVE-2019-15126 (Kr00k) Vulnerability found mainly in   Broadcom and Cypress WiFi Chips

For ASUS DSL Range of Routers only the DSL-AC68U/R have a Broadcom wifi Chipset that is still supported by the ASUS DSL team and a fix/patch will be available in the next firmware release (no date as yet).

All other ASUS DSL routers supported by ASUS have MediaTeK wifi chipsets and this vulnerability is not present in those wifi chipsets

 

 

[Namarrat]

Hi! Are they going to fix the CVE-2020-8597?

[UK Sentinel]

Namarrat wrote:

Hi! Are they going to fix the CVE-2020-8597?

I will ask them for guidance regarding the DSL Range of Routers but they may be unwilling to advise as this could indicate a potential threat vector (weakness) which would then be publicly knowledgeable

In a completely sane world, madness is the only freedom (J.G.Ballard).

[UK Sentinel]

No news from ASUS I am afraid and not likely 

In a completely sane world, madness is the only freedom (J.G.Ballard).

[Namarrat]

OK, thanks.

[lostcause]

Impressive from Asus , after 7 years they bring a fix for my old router.

ASUS RT-N12 D1 Firmware version 3.0.0.4.380.8292
– Fixed CVE-2019-15126 (Kr00k) vulnerability.

https://www.asus.com/Networking/RTN12_D1/HelpDesk_BIOS/

 

 

[UK Sentinel]

Better late then never

In a completely sane world, madness is the only freedom (J.G.Ballard).

[Author]

Posts