D-Link :: DIR-825 B1 - Firmware Version

Writing this hoping to see how DLink intends to respond to this very large hole. As someone who works in security this is 2 week old news to me but is probably new to everyone else "Hopefully not dlink devs".

So the DIR 825 along with millions of other routers are vulnerable to an outside upnp exploit basically means somebody from outside can root your router and for example open up whatever ports they want. Upnp has its own issues but it useful for those who don't want to open up a port every time some app might need a specific port but was never meant to be accessible from outside your network, Until now.

This is not some bizarre proof of concept or something that is even hard to pull off and what it would give is access to your entire private network and everything that might entail. You can test if your router is vulnerable at this link. It's owned by Steve Gibson. Many of you probably know of him, Somewhat of a celebrity in the security world. There is a upnp exposure test you can do right off the main page. It also explains whats happening and even shows you the code being used, Quite fascinating actually.