DNS rebinding attacks
A large portion of IoT devices are vulnerable to DNS rebinding attacks that give remote attackers an approach to get around firewalls and access to vulnerable devices on a local network.
DNS rebinding assaults occur when an attacker traps a user’s program or device into binding to a malicious DNS server and afterward influence the device to get to unintended areas.
As per cyber-security firm, Armis, the impact of this type of attack has on the Internet-of-Things-type of devices. Manufacturers who do commonly used IoT devices within enterprise environments ship devices that are vulnerable to a DNS rebinding attack. Also reports, the DNS rebinding flaws discovered in Blizzard apps, uTorrent, and Google Home, Roku TV, and Sonos devices.
How it attacks
To take a vulnerable device, Armis explain the device running an unauthenticated protocol like Universal Plug and Play or HTTP. These protocols commonly used to host administrative consoles for routers, printers, IP cameras to enable simple access to the device administrations.
While, IoT and other smart devices are ideal for attackers to target DNS rebinding, where they can assume a key part in encouraging observation and data theft activities. On investigation, researchers found almost all types of vulnerable devices, including TVs, routers, printers, security cameras, IP phones, Smart assistants. While, researchers estimating nearly half a billion vulnerable devices.
But, patching all these devices against DNS rebinding attacks is a massive task that may require patches from vendors that can’t be messed with security flaws like XSS and CSRF.
However, Armis specialists say that, to integrate current cyber-security monitoring items might be the effortless and practical arrangement, instead of looking and reviewing new gadgets to supplant the old ones.
https://spinonews.com/2018/07/23/millions-of-iot-devices-vulnerable-to-dns-rebinding-attacks/