Fixes: Fixed security vulnerabilities: - [CVE-2013-3069] Multiple Cross-Site Scripting (XSS): Requires Authentication to set and enable. - [CVE-2013-3070] Secuirty-Information Disclosure: Unauthenticated attackers can make a request to the management web interface to disclose the PSK of the wireless LAN. - [CVE-2013-3071] Security-Authentication Bypass: An unauthenticated attacker can send a request to the management web interface which breaks HTTP Basic Authentication and any subsequent requests to the router are now authenticated. - [CVE-2013-3073] USB Security vulnerability: A symbolic link can be created on the SMB share which grants access to the root file system. - [CVE-2013-3074] DLNA: The minidlna server will crash when accessing a non-existent file. - Vulnerabilities reported in "The Shadow File" blog post.
Скачать