Own a Cisco modem or wireless gateway? It might be owned by someone else, too

Own a Cisco modem or wireless gateway? It might be owned by someone else, too

A number of Cisco home network gateways have a security bug that allows attackers to hijack the devices remotely. A firmware update to close the hole is being rolled out to ISPs to deploy.

The networking giant said that certain Wireless Home Gateway products are vulnerable to a remote-code execution attack, which is triggered by sending a specially crafted HTTP request to the web server running on the hardware.

Cisco said "the vulnerability is due to incorrect input validation for HTTP requests," which allows "an unauthenticated, remote attacker to exploit a buffer overflow and cause arbitrary code execution."

"Successful exploitation could allow the attacker to crash the web server and execute arbitrary code with elevated privileges," we're told. "There are currently no known workarounds available for this vulnerability."

The vulnerable products are: ........

Full details here: http://www.theregister.co.uk/2014/07/17/got_a_cisco_modem_or_router_a_patch_is_on_the_way/