Update for DD-WRT V24 SP2: Uncovering the Information Disclosure Vulnerability

In our ongoing efforts to provide crucial updates on security vulnerabilities, we are highlighting a significant issue affecting routers running DD-WRT V24 SP2. The Exploit Database, a non-profit project provided by Offensive Security as a public service, has identified an information disclosure vulnerability in this version of the popular router firmware.

The vulnerability allows remote attackers to obtain sensitive information about a DD-WRT router and internal clients, including IP addresses, MAC addresses, and host names. This is achieved through a DNS rebinding attack, which can be carried out by any website viewed by an unauthenticated user on the internal network.

To make matters worse, this vulnerability affects routers that have remote administration disabled as well. Typically, users enable remote administration and set the info page to 'disabled' or 'enabled with authentication' to prevent unauthorized access. However, in this case, an unauthenticated remote attacker can still access the / page directly, revealing information about the router.

The Rebind tool facilitates this type of attack, making it easy for attackers to exploit this vulnerability. The affected information includes:

* SWRXerrorPacket=0

* SWTXgoodPacket=302

* SWTXerror

This sensitive data can be used for further network attacks and even very accurate MAC address geolocation (as discussed in our previous research). Users who have enabled remote administration should take immediate action to protect their routers.

To mitigate this vulnerability, we recommend the following:

1. Ensure remote administration is disabled or set to 'enabled with authentication'.

2. Update your DD-WRT firmware to a newer version that addresses this issue.

3. Implement additional security measures to prevent DNS rebinding attacks.

As always, it's essential to stay informed about emerging vulnerabilities and take proactive steps to secure your network. By working together, we can reduce the risk of attacks and promote a safer online environment.

Learn more about DD-WRT and its security features

For more information on DD-WRT and its capabilities, please visit our website or consult the official documentation. Additionally, you can explore our range of Information Security Certifications and high-end penetration testing services to help you stay ahead of emerging threats.

References:

* The Exploit Database (https://www.exploit-db.com/)

* Rebind tool (https://github.com/offsec/rebind)

* MAC address geolocation research (https://www.offensive-security.com/blog/mac-geolocation-research/)

Stay secure, and stay informed!

Update for dd wrt v24 sp2