KU Leuven uncovers security vulnerability impacting 4.2 million devices

Leuven (Eurotoday) – Researchers at KU Leuven, led by Professor Mathy Vanhoef, have discovered a significant security flaw in tunneling protocols, affecting 3.5 million IPv4 and 700,000 IPv6 devices. Vulnerable networks include Telenet, China Mobile, and SoftBank.

KU Leuven researchers have identified a major security vulnerability impacting millions of internet-connected devices worldwide. These devices, including servers, have been found to be susceptible to cyberattacks due to inadequate verification of incoming data packets. The researchers tested more than 4 million devices and found that over 3.5 million using IPv4 addresses and 700,000 using IPv6 addresses were vulnerable.

How did KU Leuven uncover a security flaw affecting 4.2 million devices?

The vulnerabilities identified by KU Leuven researchers pose a significant threat to internet security. According to experts, attackers can exploit these flaws to bypass security measures, send malicious traffic, and gain unauthorized access to networks. These weaknesses leave systems vulnerable to data breaches, denial-of-service attacks, and other cyber threats.

Researchers stress the urgent need for organizations to implement stricter security measures, including proper network device configuration, encryption, and regular security checks.

“Commonly used protocols are IP in IP and GRE (Generic Routing Encapsulation), but these protocols do not allow encryption or verification of the sender,”

explains Professor Mathy Vanhoef (KU Leuven).

According to officials, the vulnerabilities identified by KU Leuven researchers are present globally, with several countries at particular risk. Nations such as China, France, Japan, the United States, and Brazil have a significant number of affected devices.

Researchers noted that these vulnerabilities exist within the networks of major telecommunications companies, including China Mobile and SoftBank. The threat extends beyond corporate networks, affecting home internet users as well. Thousands of home routers in France were found to be vulnerable to attack.

In Belgium, a critical security flaw was discovered, putting many Telenet customers at risk. Their internet routers and network devices were improperly configured. Experts have alerted internet providers, network administrators, and large companies about the issue.

As a result, security measures have been reinforced globally. Even highly managed networks can have security vulnerabilities. Experts emphasize the need for continuous monitoring and proactive security measures to mitigate risks.