Router Ruckus: I-O Data’s Zero-Day Exploits Leave Users Hanging
Japanese device maker I-O Data has confirmed zero-day exploitation of flaws in multiple routers. The most serious flaw allows remote attackers to disable the router’s firewall and execute commands. While a partial fix is out, full patches won’t arrive until late December 2024. Stay safe, or your router might become a rebel without a pause!
Hot Take:
Looks like I-O Data’s routers have a bit of a ‘hot spot’ problem, and it’s not the kind you can fix with better Wi-Fi coverage. Instead of streaming your favorite shows, these routers might just be streaming your data straight to cybercriminals. Time to reboot your trust in connected devices!
Key Points:
- I-O Data confirms critical zero-day vulnerabilities in multiple routers.
- Most severe flaw allows remote attackers to disable firewalls and execute commands.
- Three main defects identified: CVE-2024-45841, CVE-2024-47133, CVE-2024-52564.
- Firmware update (version 2.1.9) released for one bug; full fixes expected by December 18, 2024.
- Exploits discovered by researchers, coordinated through Japan’s cybersecurity partnership.
Already a member? Log in here