Huawei's half-arsed router patching left kit open to botnets, "they were told"

[UK Sentinel]

Huawei’s half-arsed router patching left kit open to botnets: Chinese giant was warned years ago – then bungled it.

https://www.theregister.co.uk/2019/03/28/huawei_mirai_router_vulnerability/

ISP alerted biz to UPnP flaw in 2013. Years later, same flaw kept cropping up

Exclusive Huawei bungled its response to warnings from an ISP’s code review team about a security vulnerability common across its home routers – patching only two models rather than all of its products that used the same flawed firmware.

Years later, those unpatched Huawei gateways, still vulnerable and still in use by broadband subscribers around the world, were caught up in a Mirai-variant botnet that exploited the very same hole flagged up earlier by the ISP’s review team

Read full story at the Register – https://www.theregister.co.uk/2019/03/28/huawei_mirai_router_vulnerability/

[Author]

Posts