Update for DD-WRT V24 SP2: Critical Information Disclosure Vulnerability

As part of its ongoing efforts to provide a comprehensive archive of public exploits and vulnerable software, the Exploit Database has identified a critical information disclosure vulnerability in DD-WRT V24 SP2. This non-profit project is maintained by Offensive Security, an information security training company that also offers high-end penetration testing services.

The vulnerability allows remote attackers to gain sensitive information about a DD-WRT router and internal clients, including IP addresses, MAC addresses, and host names. The exploit can be achieved even if remote administration is disabled, making it a significant concern for network administrators.

The issue arises from the fact that the / page on the info page can still be accessed directly by an unauthenticated remote attacker, returning sensitive data such as SWRXerrorPacket=0 SWTXgoodPacket=302 SWTXerror. This information can be used for further network attacks as well as very accurate MAC address geolocation.

To exploit this vulnerability, a malicious actor only needs to view the internal IP address of the router from an unauthenticated location. The attacker can then gain access to sensitive information about the router and its clients, including IP addresses, MAC addresses, and host names.

It is essential for network administrators to take immediate action to mitigate this risk by configuring their DD-WRT routers to prevent remote attackers from accessing this sensitive information. Users who enable remote administration typically set the info page to 'disabled' or 'enabled with authentication' in order to prevent remote users from obtaining this information without first authenticating to the router.

In conclusion, the Exploit Database highly recommends that all DD-WRT V24 SP2 users apply the necessary patches and configurations to prevent exploitation of this critical vulnerability. Failure to do so may leave your network vulnerable to further attacks.

References:

* The Rebind tool easily facilitates this type of rebinding attack.

* '1' MAC address geolocation.

By understanding the severity of this vulnerability, network administrators can take proactive measures to protect their networks and ensure the security of their clients' sensitive information.

Update for dd wrt v24 sp2