4 ms·

Every exploit listed for my router (tplink Archer A7) has no "affected version" listed nor indications if it has been patched, but clicking through to the CVEs

Every exploit listed for my router (tplink Archer A7) has no "affected version" listed nor indications if it has been patched, but clicking through to the CVEs indicates all have been remediated. As near as I can tell this website is just scraping CVEs, poorly, in order to sell their security services (which consist, at least in part, of an email reminder to rotate your router password...seriously?).

wnevets 5y ago
so spam?
ndata 5y ago
OP here, Yes, I agree, we (modemly) could do better 1. Show the vulnerability status (patched / open) 2. Show affected firmware versions 3. Display manufacturer's last patch release date Though lots of the dataset is clean, still we do lots of parsing and regexing to extract insights out of a massive haystack. The intention of this tool is for everyone to realize and keep their firmware updated And No, we don't sell any services. The security reminder emails are free
- ndata 5y ago
  OP here. To clarify. The affected firmware versions are always available in the detailed description text. Its just that we couldn't show them in the header due to parsing failures in few cases
  - chasil 5y ago
    A few questions. I am guessing that very few of these can be exploited on the side that faces the public internet. True? What percentage require access to the router via administrative login on the private network? How many would need nothing but a hostile .exe on the private network? How many could achieve an exploit with nothing but hostile JavaScript on the private network? Will changing the private network away from 192.168.* to something on 10.* protect a vulnerable router from some of these exploits? What else can be done to protect a vulnerable router?
bserge 5y ago
You're not using OpenWRT on a C7/A7? Please do someone a favour and sell it, they're in short supply.
GekkePrutser 5y ago
Even so, you can forget about most of these being up to date. Even experienced IT people that update their servers religiously tend to forget the router in the closet.

wnevets 5y ago

so spam?

ndata 5y ago

OP here, Yes, I agree, we (modemly) could do better 1. Show the vulnerability status (patched / open) 2. Show affected firmware versions 3. Display manufacturer's last patch release date Though lots of the dataset is clean, still we do lots of parsing and regexing to extract insights out of a massive haystack. The intention of this tool is for everyone to realize and keep their firmware updated And No, we don't sell any services. The security reminder emails are free

ndata 5y ago
OP here. To clarify. The affected firmware versions are always available in the detailed description text. Its just that we couldn't show them in the header due to parsing failures in few cases
- chasil 5y ago
  A few questions. I am guessing that very few of these can be exploited on the side that faces the public internet. True? What percentage require access to the router via administrative login on the private network? How many would need nothing but a hostile .exe on the private network? How many could achieve an exploit with nothing but hostile JavaScript on the private network? Will changing the private network away from 192.168.* to something on 10.* protect a vulnerable router from some of these exploits? What else can be done to protect a vulnerable router?

bserge 5y ago

You're not using OpenWRT on a C7/A7? Please do someone a favour and sell it, they're in short supply.

GekkePrutser 5y ago

Even so, you can forget about most of these being up to date. Even experienced IT people that update their servers religiously tend to forget the router in the closet.