IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

NetUSB flaw exposes millions of routers to remote code execution

The vulnerability impacts devices from Netgear, TP-Link, D-Link, and Western Digital

Security researchers have warned of a vulnerability that exposes millions of routers to remote code execution.

SentinelOne researcher Max Van Amerongen discovered the bug while experimenting with router code as part of the Pwn2Own ethical hacking competition. The flaw lies in NetUSB, a program written by software developer KCodes.

This program, which ships in millions of routers, allows remote computers to access devices on a local area network as though they were connected via USB. A typical use case would be connecting to a printer remotely.

The bug, CVE-2021-45608, is a buffer overflow vulnerability. NetUSB takes a value from the remote PC and then adds its own number, using the result to calculate what else is read from the remote PC. The program doesn't validate the initial value, making it possible to produce a larger result than intended.

An attacker could use this to write more data than the program expected into the kernel, potentially enabling them to send commands that could execute on the router.

There are some restrictions that make the bug difficult to exploit, including limits on the size of the code sent. Nevertheless, SentinelOne says that it's worth addressing.

Related Resource

Container network security guide for dummies

Enforcing Kubernetes best practices

For Dummies style cover with whitepaper title at the topFree download

"While these restrictions make it difficult to write an exploit for this vulnerability, we believe that it isn’t impossible and so those with Wi-Fi routers may need to look for firmware updates for their router," it said.

Routers affected include those from most major manufacturers including Netgear, TP-Link, D-Link, and Western Digital. KCodes confirmed on December 19 that it had sent the patch to all vendors, and Netgear released an advisory the following day.

Router bugs are especially pernicious because they often affect home and small business users, targeting devices that people rarely remember to update. That means these devices can pave the way for malware infections that join the routers to botnets or change DNS settings, taking users to malicious sites. When bugs target programs used across many vendors, the target base can be huge.

2019 saw a massive UPnProxy vulnerability render millions of routers vulnerable to attack. More recently, Sky Broadband was found to have dragged its feet fixing a flaw that exposed its users' home networks to hackers.

Featured Resources

Big data for finance

How to leverage big data analytics and AI in the finance sector

Free Download

Ten critical factors for cloud analytics success

Cloud-native, intelligent, and automated data management strategies to accelerate time to value and ROI

Free Download

Remove barriers and reconnect with your customers

The $260 billion dollar friction problem businesses don't know they have

Free Download

The future of work is already here. Now’s the time to secure it.

Robust security to protect and enable your business

Free Download

Most Popular

The human brain is far more complex than AI researchers imagine
artificial intelligence (AI)

The human brain is far more complex than AI researchers imagine

17 Sep 2022
How to secure your hybrid workforce
Advertisement Feature

How to secure your hybrid workforce

23 Sep 2022
What your hybrid workforce needs from their laptops
Advertisement Feature

What your hybrid workforce needs from their laptops

21 Sep 2022