4 ms·
This problem is only worsening. I recommend running nmap vulners or flan on a cron at home against your network. I found multiple CVEs in my brand new (2023)
by tonymet 3y ago
This problem is only worsening. I recommend running nmap vulners or flan on a cron at home against your network.
I found multiple CVEs in my brand new (2023) router. They were running old versions of dropbear SSH, dnsmasq that had vulns.
Most routers are just cobbled together from years-old OpenWRT releases or worse.
I also found vulns on a brother printer, a smart plug, wifi-enabled air filter.
Everything in your house that has wifi probably has a vuln on it.
https://github.com/vulnersCom/nmap-vulners https://github.com/vulnersCom/nmap-vulners
https://github.com/cloudflare/flan https://github.com/cloudflare/flan
I urge everyone to check you'll definitely find a CVE
- doublepg23 3y agoWow, I'm running flan now - what a cool tool! Thanks for the tip.
- tonymet 3y agoGreat to hear it i hope it helps. Let me know if you find something. It’s a often under looked area of cybersecurity at home.
- brokenmachine 3y agoI did my router and it showed like a thousand CVEs for an out of date dnsmasq but from the few I did randomly look at, they just allow to crash the router so I guess DOS, not RCE or anything.