
VulnCheck cybersecurity researchers have found a new exploit that targets older, end-of-life D-Link routers in order to hijack them. Routers are often vulnerable to attacks because they are often not properly secured, are used when they are outdated and don’t receive frequent firmware updates.
In this instance, the software on the older D-Link routers cannot properly sanitize user input, which allows hackers to send specifically crafted requests to the router without needing any authentication. This means that attackers can inject and execute arbitrary shell commands remotely and hijack the hardware itself.