The list of hardware manufacturers affected by the recent Realtek vulnerabilities is rather long: AsusTEK, Belkin, D-Link, Edimax, Hama, Logitec, Netgear and many more equip their Wi-Fi devices with vulnerable software development kits (SDKs) from Realtek.
A vulnerability within the Realtek RTL819xD module allows hackers to gain complete access to the device, installed operating systems and other network devices. “Our security reseachers have discovered and analyzed this vulnerability, which affects hundreds of thousands of devices. We notified Realtek, and they immediately responded and provided an appropriate patch. Manufacturers using vulnerable Wi-Fi modules are strongly encouraged to check their devices and provide security patches to their users,” said Florian Lukavsky, managing director of IoT Inspector. The security platform probes the firmware of IoT devices such as routers, IP cameras or printers. The company has already published a number of coordinated security advisories with affected manufacturers in the past, thwarting potential hacking attacks. For this particular case, IoT Inspector is making its platform available to potentially affected manufacturers and users for a free check. Only by analyzing each firmware can it be determined whether vulnerable components are still being used.