Serious Flaws Discovered in D-Link Routers • Blisstech Solutions

Researchers at Fortinet have uncovered serious flaws in four D-Link routers. The router vulnerabilities were found to allow for remote code execution which means a remote attacker could gain control of your router, snoop on your traffic and redirect your browser to malicious websites.

According to the researchers, four different models: DIR-652, DIR-655, DIR-866L and DHP-1565 could permit remote code execution. These types of router vulnerabilities get found in routers every once in a while and the manufacturers typically fix it by releasing an updated version to the firmware. This time, however, D-Link confirmed that it wouldn’t be releasing new firmware for these four models because they’ve reached their end-of-life.

If that sounds a bit slopey shouldered, then you are correct. One of the models, the DIR-866L, was introduced in 2014 and discontinued only in 2018. Another model, the DIR-655, was introduced in 2006, but also discontinued only last year. Three of them — the DIR-655, DIR-866L and DHP-1565 — can still be bought new from third-party sellers on Amazon’s U.S. website, and the first is even an Amazon’s Choice model.

D-Link is no stranger to vulnerabilities; in September, researchers discovered vulnerabilities in D-Link routers that can leak passwords for the devices, and which have the potential to affect every user on networks that use them for access. And in May, a researcher found attackers using the Google Cloud Platform to carry out three separate waves of DNS hijacking attacks against vulnerable D-Link and other consumer routers.

Our advice is that if you own one of these routers then get yourself a new router ASAP. Otherwise you are at risk of getting hacked.

← IT Security Still Top Concern For SMBs What is a managed service? →

3 things you should do now to protect your business email

It's a fact, most cyber attacks start with an email. In fact, a frightening 91% of attacks begin with someone clicking on something they shouldn't in an email they received. Here are three things you can do now to protect your business and make it harder for...

Getting to Grips with Email Security

Owners of small and medium-sized businesses often make the mistake of thinking that they aren’t on the criminals’ radar. But more than 40% of cyber attacks are aimed at small businesses – and email is usually the criminals’ way in. Our new guide, ‘Getting to Grips...

A woman looking at her phone while working from home

Homeworking is bad for IT security

A new homeworking security report from CyberArk has surveyed 3000 remote office workers and IT professionals. It finds that increased homeworking, resulting from the 2020 pandemic, could be bad news for a company’s IT security posture. It has uncovered several...

Never mind “can’t teach an old dog new tricks”…

They say you can’t teach an old dog new tricks, but what happens when it’s a young pup that needs training? New research on people under 40 has revealed a scary attitude towards cyber security. We tell you more here.

Tech Tip: Understanding Microsoft work and personal accounts

Welcome to another Blisstech Solutions Tuesday Tech Tip! Have you set up both a personal and work Microsoft account and are now running into problems when you are trying to work as you can't work out which account you are logged in with? You are not alone and we see...

Point-to-point WiFi – How to extend your network across buildings without cables

No wires? No problem! Point-to-point Wireless Revolutionises Connectivity for Every Business In today's fast-paced digital world, having a reliable and extensive network is crucial for the success of any business. However, the physical limitations of laying down...

Tech Tip: How to Sync Teams Files to Your Computer

Hello everyone, welcome to a new Tuesday Two Minute Tech Tip. 👉 Do you use Microsoft 365? 👉 Do you need to collaborate on documents with your colleagues? 👉 Do you want to do this using the same familiar Windows...

Secure your data under lock and key

Your business's data is invaluable. Without it, you wouldn’t have much of a business, would you? So that data must be kept safe… and one of the best ways to do that is to encrypt it. That way, even if a cybercriminal gets their hands on it, your data is worthless to...

Windows 11 optional update: Why it’s better to wait

Microsoft has just announced an option for people to trial new features before their general release in Windows 11. This isn’t about fixes to security flaws – everyone gets those at the same time. This is an opportunity for businesses to jump the queue to receive new features and updates first. Sound exciting? Yes! Worth the risk? Not quite. Our …
Read More

Is that Chrome extension filled with malware?

Chrome extensions are great for boosting productivity and saving time. But if they’re not the real deal, you could be at risk from malware. We tell you how to stay protected.

More Content