Researchers have identified over 12 million routers in use worldwide with the vulnerability, called Misfortune Cookie. At least 200 different models of device from various manufacturers and brands are vulnerable, including models by D-Link, Edimax, Huawei, TP-Link, ZTE, and ZyXEL and many others.
If a router is vulnerable, any device connected to the network – PCs, phones, tablets, printers, security cameras, refrigerators, or any other networked device – is at risk of compromise. An attacker exploiting the Misfortune Cookie vulnerability can monitor Internet connections, steal credentials and sensitive data, infect machines with malware, or control devices.
To protect consumers and small businesses against the vulnerability, Check Point recommends adding a firewall to all PCs to strengthen protection from attack, such as ZoneAlarm Free Firewall, which blocks malicious activity on computers. The vulnerability has been assigned the CVE-2014-9222 identifier.
- JOSEPH RUTTER
- Case Studies
- Posted On
