erroneo.us
Search all guides⌘K

Digest · Friday

Security digest: September 24, 2021

1 editorial brief.

All digests · RSS · Markdown

Take stock

  • Check exposure: D-Link DIR-605 CVE-2021-40655: EOL Router Leaks Admin Login. Anyone with a D-Link DIR-605 or DIR-605L still routing traffic, including branch offices, labs and remote workers' home networks that carry company traffic.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Vulnerability · CVE-2021-40655

D-Link DIR-605 CVE-2021-40655: EOL Router Leaks Admin Login

There is no patch and never will be; any DIR-605 or DIR-605L still in service, especially one with its admin page reachable from the internet, should be replaced, and its admin password treated as known.

Must act: Anyone with a D-Link DIR-605 or DIR-605L still routing traffic, including branch offices, labs and remote workers' home networks that carry company traffic.

Can relax: Organizations with no DIR-605-family routers anywhere in their estate; nothing in this CVE affects supported D-Link models.

  1. Inventory routers in branch offices, labs and home-office kits and flag any D-Link DIR-605 or DIR-605L.
  2. Replace every unit with a currently supported router; there is no firmware fix to install.
  3. Until a unit is replaced, make sure its web admin page is not reachable from the WAN side.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 0

GitHub-reviewed advisories rated critical, published this day (Pacific time).

None.