EXPLOITING ZERO DAYS IN ABANDONED HARDWARE

Summary from the TLDR InfoSec newsletter

Trail of Bits researchers exploited two discontinued home network devices (Netgear WGR614v9 router and BitDefender Box V1) at DistrictCon's Junkyard competition, achieving remote root access through chained vulnerabilities, including UPnP authentication bypass, buffer overflows, and firmware downgrade attacks. The research highlights how end-of-life hardware becomes a persistent security risk when manufacturers stop releasing updates, leaving vulnerabilities permanently unpatched. Both devices were initially designed to protect home networks, but became easy targets due to years without security updates.