{"id":26209,"date":"2018-01-02T08:00:00","date_gmt":"2018-01-02T16:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/"},"modified":"2018-01-02T08:00:00","modified_gmt":"2018-01-02T16:00:00","slug":"directv-genie-dvr-may-have-a-major-vulnerability","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/","title":{"rendered":"DirecTV Genie DVR May Have A Major Vulnerability"},"content":{"rendered":"<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignleft size-full wp-image-7217\" src=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg\" alt=\"\" width=\"300\" height=\"225\" \/>If you have a Genie DVR system, you should be aware of a major security flaw in the firmware that could allow a hacker to take complete control over the device.<\/p>\n<p>At issue is the equipment offered by AT&amp;T as part of their free DireTV WVB Kit. Researchers of the ZDI initiative and Trend Micro discovered a zero-day vulnerability in one of the core components of the system, Linksys WVBR0-25, which is a Linux-powered wireless video bridge. It is this bridge that allows customers to connect up to eight Genie client boxes connected to television sets in customers&#8217; homes.<\/p>\n<p>Trend Micro researcher Ricky Lawshae took a deep dive into the firmware and was able to get the Linksys WVBR0-25 to divulge a wealth of information from the device&#8217;s web server, without requiring any sort of authentication whatsoever. There wasn&#8217;t even a login screen, just a wall of easy-to-access text, which included:<\/p>\n<ul>\n<li>Customer WPS PIN<\/li>\n<li>Connected clients<\/li>\n<li>Processes currently running<\/li>\n<\/ul>\n<p>And more. Lawshae had this to say after completing his investigation:<\/p>\n<p>&#8220;It literally took 30 seconds of looking at this device to find and verify an unauthenticated, remote root command injection vulnerability. It was at this point I became pretty frustrated.<\/p>\n<p>The vendors involved here should have some form of secure development to prevent bugs like this from shipping. More than that, we as security practitioners have failed to affect the changes needed in the industry to prevent simple yet impactful bugs from reaching unsuspecting consumers.&#8221;<\/p>\n<p>It gets worse, though. When the ZDI Initiative reported this security flaw to the manufacturer, rather than issuing a patch to correct it, they simply ceased all communication. After more than six months of trying, and getting nowhere, ZDI decided to publicize the vulnerability in the hopes that doing so would finally prompt the company to take action.<\/p>\n<p>Until they do, about your only option (aside from simply canceling your service) is to limit the number of devices that can interact with Linksys WVBR0-25 so as to limit your exposure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you have a Genie DVR system, you should be aware of a major security flaw in the firmware that could allow a hacker to take complete control over the device. At issue is the equipment offered by AT&amp;T as part of their free DireTV WVB Kit. Researchers of the ZDI initiative and Trend Micro [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.2 (Yoast SEO v22.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>DirecTV Genie DVR May Have A Major Vulnerability<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DirecTV Genie DVR May Have A Major Vulnerability\" \/>\n<meta property=\"og:description\" content=\"If you have a Genie DVR system, you should be aware of a major security flaw in the firmware that could allow a hacker to take complete control over the device. At issue is the equipment offered by AT&amp;T as part of their free DireTV WVB Kit. Researchers of the ZDI initiative and Trend Micro [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2018-01-02T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263\"},\"headline\":\"DirecTV Genie DVR May Have A Major Vulnerability\",\"datePublished\":\"2018-01-02T16:00:00+00:00\",\"dateModified\":\"2018-01-02T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\"},\"wordCount\":347,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\",\"url\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\",\"name\":\"DirecTV Genie DVR May Have A Major Vulnerability\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg\",\"datePublished\":\"2018-01-02T16:00:00+00:00\",\"dateModified\":\"2018-01-02T16:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage\",\"url\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg\",\"contentUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DirecTV Genie DVR May Have A Major Vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/grapevinemsp.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DirecTV Genie DVR May Have A Major Vulnerability","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"DirecTV Genie DVR May Have A Major Vulnerability","og_description":"If you have a Genie DVR system, you should be aware of a major security flaw in the firmware that could allow a hacker to take complete control over the device. At issue is the equipment offered by AT&amp;T as part of their free DireTV WVB Kit. Researchers of the ZDI initiative and Trend Micro [&hellip;]","og_url":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2018-01-02T16:00:00+00:00","og_image":[{"url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/"},"author":{"name":"admin","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263"},"headline":"DirecTV Genie DVR May Have A Major Vulnerability","datePublished":"2018-01-02T16:00:00+00:00","dateModified":"2018-01-02T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/"},"wordCount":347,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/","url":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/","name":"DirecTV Genie DVR May Have A Major Vulnerability","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg","datePublished":"2018-01-02T16:00:00+00:00","dateModified":"2018-01-02T16:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#primaryimage","url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg","contentUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/12\/DirecTV.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/directv-genie-dvr-may-have-a-major-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"DirecTV Genie DVR May Have A Major Vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/grapevinemsp.com"]}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/26209"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=26209"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/26209\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=26209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=26209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=26209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}