Is dd-wrt using NetUSB?

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
View previous topic :: View next topic  
Author Message
chenshaoju
DD-WRT User


Joined: 10 Apr 2008
Posts: 100
Location: Chinese Mainland
PostPosted: Fri Jan 14, 2022 10:17    Post subject: Is dd-wrt using NetUSB? Reply with quote
I read an article today: NetUSB flaw could impact millions of routers

I'm wondering is DD-WRT using NetUSB? Confused
_________________
NetGear R7000
DD-WRT v3.0-r52894 std
Back to top View user's profile Send private message Visit poster's website MSN Messenger
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14221
Location: Texas, USA
PostPosted: Fri Jan 14, 2022 13:34    Post subject: Reply with quote
To answer your question, login to your router via telnet / ssh and issue a
Code:
ls /lib/modules/$(uname -r) | grep netusb
and
Code:
ls /lib/modules/$(uname -r) | grep NetUSB


https://kb.netgear.com/000064437/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0278
https://nvd.nist.gov/vuln/detail/CVE-2021-45608
https://www.tenable.com/cve/CVE-2021-45608
https://www.sentinelone.com/labs/cve-2021-45608-netusb-rce-flaw-in-millions-of-end-user-routers/

The kernel module is NetUSB.ko developed by KCodes, and is only present in stock firmwares that I am aware of.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)
----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Back to top View user's profile Send private message Visit poster's website
grizewald
DD-WRT Novice


Joined: 17 Oct 2021
Posts: 1
PostPosted: Fri Jan 28, 2022 9:52    Post subject: Reply with quote
kernel-panic69 wrote:
To answer your question, login to your router via telnet / ssh and issue a
Code:
ls /lib/modules/$(uname -r) | grep netusb
and
Code:
ls /lib/modules/$(uname -r) | grep NetUSB



Adding -i (ignore case) to the grep command would do the same thing in one command. Wink

ls /lib/modules/$(uname -r) | grep -i netusb
Back to top View user's profile Send private message
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14221
Location: Texas, USA
PostPosted: Fri Jan 28, 2022 12:27    Post subject: Reply with quote
Indeed it will. Thanks for the reminder. But the fact remains that DD-WRT is not affected by this vulnerability.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)
----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Back to top View user's profile Send private message Visit poster's website
DudeManDeuce
DD-WRT Novice


Joined: 04 May 2018
Posts: 2
PostPosted: Wed Feb 02, 2022 16:15    Post subject: Reply with quote
I heard that dd-wrt is not vulnerable but it is nice to be able to demonstrate that is is not for sure. Thanks!
Back to top View user's profile Send private message
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum