Misfortune Cookie Vulnerability - Revision history

Xx176: Xx176 moved page Misfortune Cookie vulnerability of TP-Link modems to Misfortune Cookie Vulnerability

2018-09-13T14:12:45Z

Xx176 moved page Misfortune Cookie vulnerability of TP-Link modems to Misfortune Cookie Vulnerability

← Older revision	Revision as of 14:12, 13 September 2018
(No difference)

Xx176: Xx176 moved page Misfortune Cookie vulnerability of TP-Link modem/router to Misfortune Cookie vulnerability of TP-Link modems

2018-09-13T14:09:25Z

Xx176 moved page Misfortune Cookie vulnerability of TP-Link modem/router to Misfortune Cookie vulnerability of TP-Link modems

← Older revision	Revision as of 14:09, 13 September 2018
(No difference)

Fy792 at 20:48, 28 July 2018

2018-07-28T20:48:48Z

← Older revision		Revision as of 20:48, 28 July 2018
Line 1:		Line 1:
	<div class="ncfrightbox"> {{Template:Modem Links}} </div>		<div class="ncfrightbox"> {{Template:Modem Links}} </div>
	~~[[File:TP-Link TD-W8951ND.jpg\|thumb\|right\|250px\|A TP-Link TD-W8951ND modem]]~~
	This article is about the ''Misfortune Cookie'' vulnerability discovered on modem [[firmware]] in 2014, what it is and what to do about it.		This article is about the ''Misfortune Cookie'' vulnerability discovered on modem [[firmware]] in 2014, what it is and what to do about it.

Line 34:		Line 34:

	==Upgradable Units==		==Upgradable Units==
			[[File:TP-Link TD-W8951ND.jpg\|thumb\|right\|250px\|A TP-Link TD-W8951ND modem]]
	As long as you have the following hardware versions and the latest corresponding firmware versions installed, then your modem/router is not affected by the Misfortune Cookie.		As long as you have the following hardware versions and the latest corresponding firmware versions installed, then your modem/router is not affected by the Misfortune Cookie.

Fy792 at 20:48, 28 July 2018

2018-07-28T20:48:19Z

← Older revision		Revision as of 20:48, 28 July 2018
Line 1:		Line 1:
			<div class="ncfrightbox"> {{Template:Modem Links}} </div>
	[[File:TP-Link TD-W8951ND.jpg\|thumb\|right\|250px\|A TP-Link TD-W8951ND modem]]		[[File:TP-Link TD-W8951ND.jpg\|thumb\|right\|250px\|A TP-Link TD-W8951ND modem]]
	This article is about the ''Misfortune Cookie'' vulnerability discovered on modem [[firmware]] in 2014, what it is and what to do about it.		This article is about the ''Misfortune Cookie'' vulnerability discovered on modem [[firmware]] in 2014, what it is and what to do about it.

Xx176 at 02:57, 21 July 2018

2018-07-21T02:57:46Z

← Older revision		Revision as of 02:57, 21 July 2018
Line 80:		Line 80:

	[[Category:DSL]]		[[Category:DSL]]
			[[Category:Modems]]
	[[Category:Privacy and Security]]		[[Category:Privacy and Security]]

Al178: /* Non-Upgradable Units */

2018-07-12T18:39:13Z

Non-Upgradable Units

← Older revision		Revision as of 18:39, 12 July 2018
Line 61:		Line 61:
	*TD-8816: Hardware v7: '''at risk''' - TP-Link has not issued a firmware fix		*TD-8816: Hardware v7: '''at risk''' - TP-Link has not issued a firmware fix
	*TD-W8901G: '''at risk''' - the unit has reached end-of-life (EOL) and is no longer supported by the manufacturer. TP-Link has not issued a firmware fix		*TD-W8901G: '''at risk''' - the unit has reached end-of-life (EOL) and is no longer supported by the manufacturer. TP-Link has not issued a firmware fix
			*TD-8840T: '''at risk''' - TP-Link has not issued a firmware fix

	==Notes==		==Notes==

Fy792: Fy792 moved page CERT-announced vulnerability of TP-Link modem/router to Misfortune Cookie vulnerability of TP-Link modem/router

2018-06-23T20:14:15Z

Fy792 moved page CERT-announced vulnerability of TP-Link modem/router to Misfortune Cookie vulnerability of TP-Link modem/router

← Older revision	Revision as of 20:14, 23 June 2018
(No difference)

Fy792: /* Notes */

2018-06-23T20:13:23Z

Notes

← Older revision		Revision as of 20:13, 23 June 2018
Line 64:		Line 64:
	==Notes==		==Notes==

	# A lot of your questions can be answered on [http://www.tp-link.com/en/support/faq/?pcid=203&problem=&m=TD-W8951ND&keywords=&faqid= TP-Links FAQs], feel free to browse~~<br>~~<br>		# A lot of your questions can be answered on [http://www.tp-link.com/en/support/faq/?pcid=203&problem=&m=TD-W8951ND&keywords=&faqid= TP-Links FAQs], feel free to browse<br>
	# WAN vulnerability (subject to the '''Note''' above, in the [https://www.ncf.ca/ncf/support/wiki/CERT-announced_vulnerability_of_TP-Link_modem/router#Vulnerability Vulnerability] section) is blocked from the Internet by disabling WAN access via ACL (Access Control Level) settings:~~<br>~~<br>		# WAN vulnerability (subject to the '''Note''' above, in the [https://www.ncf.ca/ncf/support/wiki/CERT-announced_vulnerability_of_TP-Link_modem/router#Vulnerability Vulnerability] section) is blocked from the Internet by disabling WAN access via ACL (Access Control Level) settings:<br>
	#* Log into '''192.168.1.1''', press Enter		#* Log into '''192.168.1.1''', press Enter
	#* Enter '''Username: admin''' & '''[[Passwords\|Password: NCF DSL password]]''', click on the '''Login''' button		#* Enter '''Username: admin''' & '''[[Passwords\|Password: NCF DSL password]]''', click on the '''Login''' button
Line 71:		Line 71:
	#* Verify that '''ACL: Activated''' is selected. If not, do so		#* Verify that '''ACL: Activated''' is selected. If not, do so
	#* Verify that '''Interface: LAN''' is selected. If not, do so		#* Verify that '''Interface: LAN''' is selected. If not, do so
	#* Click '''Save'''~~<br>~~<br>		#* Click '''Save'''<br>
	# NCF started disabling WAN access via ACL on all modems since July/August 2014. NCF also checked that '''Remote Management''' port is disabled. See [http://www.tp-link.com/en/article/?faqid=476 this TP-Link article] for further step-by-step instructions~~<br>~~<br>		# NCF started disabling WAN access via ACL on all modems since July/August 2014. NCF also checked that '''Remote Management''' port is disabled. See [http://www.tp-link.com/en/article/?faqid=476 this TP-Link article] for further step-by-step instructions<br>
	# LAN vulnerability is blocked from the LAN by using a strong Wi-Fi password (NCF applies the NCF_DSL_password here). If your Wi-Fi is open (where, in like many public Wi-Fi access places, no password is required to connect), then your modem is open to attack. We strongly advise that you implement '''Authentication Type: WPA-PSK/WPA2-PSK''' with '''Encryption: TKIP/AES''' to secure your Wi-Fi network with the highest available settings		# LAN vulnerability is blocked from the LAN by using a strong Wi-Fi password (NCF applies the NCF_DSL_password here). If your Wi-Fi is open (where, in like many public Wi-Fi access places, no password is required to connect), then your modem is open to attack. We strongly advise that you implement '''Authentication Type: WPA-PSK/WPA2-PSK''' with '''Encryption: TKIP/AES''' to secure your Wi-Fi network with the highest available settings

Fy792 at 19:51, 23 June 2018

2018-06-23T19:51:55Z

← Older revision		Revision as of 19:51, 23 June 2018
Line 79:		Line 79:

	[[Category:DSL]]		[[Category:DSL]]
			[[Category:Privacy and Security]]

Fn352: /* Non-Upgradable Units */ wording

2018-01-19T17:53:25Z

Non-Upgradable Units: wording

← Older revision		Revision as of 17:53, 19 January 2018
Line 58:		Line 58:

	==Non-Upgradable Units==		==Non-Upgradable Units==
	*TD-W8951ND, Hardware v4: '''at risk''' - TP-Link ~~hasn't~~ issued a FW fix		*TD-W8951ND, Hardware v4: '''at risk''' - TP-Link has not issued a firmware fix
	*TD-8816: Hardware v7: '''at risk''' - TP-Link ~~hasn't~~ issued a FW fix		*TD-8816: Hardware v7: '''at risk''' - TP-Link has not issued a firmware fix
	*TD-W8901G: '''at risk''' - TP-Link ~~hasn't~~ issued a FW fix		*TD-W8901G: '''at risk''' - the unit has reached end-of-life (EOL) and is no longer supported by the manufacturer. TP-Link has not issued a firmware fix

	==Notes==		==Notes==