Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Cisco Talos reported four command-injection vulnerabilities in MC Technologies’ MC-LR industrial router and three vulnerabilities in the GoCast BGP tool. When Talos published its roundup on December 9, 2024, it said the flaws had not been patched. That is a historical status report, not confirmation that they remain unpatched today. “Cisco” here means Cisco Talos, the researchers who disclosed the issues—not the maker of either product.
Which products and vulnerabilities did Talos report?
The disclosures concern two different kinds of infrastructure software: MC Technologies’ industrial edge router and GoCast, a host-based tool for advertising routes using BGP. The products have separate maintainers, vulnerability reports and attack paths.
| Product | Reported issues | Attack prerequisite described by Talos | Reported function involved |
|---|---|---|---|
| MC Technologies MC-LR | Four: CVE-2024-28025, CVE-2024-28026, CVE-2024-28027 and CVE-2024-21786 | Authenticated HTTP request | Web-interface I/O configuration and importing uploaded configuration files |
| GoCast | Three: CVE-2024-21855, CVE-2024-28892 and CVE-2024-29224 | An API path for app registration and deregistration does not require authentication; the other two issues can lead to command execution | App registration and deregistration, and OS command execution |
Talos’s roundup identifies the MC-LR issues in TALOS-2024-1953 and TALOS-2024-1954. The GoCast findings are TALOS-2024-1962, TALOS-2024-1960 and TALOS-2024-1961. CVE identifiers and report names are useful when checking vendor notices or asset inventories.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What is known about the MC-LR router flaws?
Talos credited Matt Wiseman with discovering the MC-LR vulnerabilities. Three, grouped under TALOS-2024-1953, involve OS command injection in the router’s web-interface I/O configuration functionality. The fourth, TALOS-2024-1954, is in the import of uploaded configuration files. Talos said an attacker must send an authenticated HTTP request to trigger these flaws; the report does not describe them as unauthenticated vulnerabilities.
#1 Best Overall
MC-LR is an industrial router family with features that include IPsec and OpenVPN, firewall capabilities, and HTTP and SNMP remote management. Some models also offer serial-to-TCP translation and digital input/output. SecurityWeek reported that its coverage concerned vulnerabilities found in web interface version 2.10.5, but that detail should not be treated as proof that every model or build has identical exposure. Check the applicable MC Technologies advisory for the exact product and version.
What is GoCast, and can an unauthenticated attacker exploit it?
GoCast provides BGP routing for route advertisements from a host. Talos says it is commonly used for anycast-based load balancing, distributing infrastructure services across geographically diverse locations. The report is about this routing tool, not a Cisco router product.
Rank #2
- Aggregate Throughput: 100 Mbps to 300 Mbps
- Total onboard WAN or LAN 10/100/1000 ports: 3
- RJ-45-based ports: 2
- SFP-based ports: 2
- Enhanced service-module (SM-X) slot: 1
Talos credited Edwin Molenaar and Matt Street of Cisco Meraki with finding the GoCast issues. TALOS-2024-1962 (CVE-2024-21855) describes an HTTP API that allows app registration and deregistration without authentication. Talos says this missing authentication can be used to exploit the other two reported flaws—TALOS-2024-1960 (CVE-2024-28892) and TALOS-2024-1961 (CVE-2024-29224)—which are OS command-injection vulnerabilities that can result in arbitrary command execution. Thus the disclosure includes an unauthenticated API issue associated with command-execution risk; it does not establish that every GoCast installation is reachable from the public internet or equally exposed.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →When were the flaws disclosed, and what did “eight months” mean?
SecurityWeek reported that Cisco first contacted MC Technologies in March 2024 and GoCast’s developer in April 2024. Talos’s public roundup appeared on December 9, 2024, followed by SecurityWeek’s article on December 10. The “about eight months” description refers to the interval between vendor contact and the December status report, not to a continuing measurement of how long the vulnerabilities have been unpatched.
Rank #3
- Dual Gigabit Ethernet Ports: Features 2 RJ45 10/100/1000 LAN/WAN ports for high-speed network connectivity and flexible deployment options
- Enhanced High-Speed WAN Interface Card Slots: Equipped with 2 EHWIC slots for modular expansion and customization of network services
- Security Feature Set: Includes SEC feature set with embedded hardware encryption acceleration and advanced security services for comprehensive network protection
- Doublewide EWIC Slot: Provides 1 doublewide EWIC slot that occupies both standard EHWIC slots when used, offering flexibility for high-density interface requirements
- USB Connectivity: Includes 1 USB port for external storage, configuration management, and additional connectivity options
Were the vulnerabilities patched?
Talos wrote on December 9, 2024: “These vulnerabilities have not been patched at time of this posting.” The available reporting does not establish whether MC Technologies or the GoCast maintainer issued fixes later. Operators should check current vendor or maintainer advisories and verify the installed product and build rather than rely on the December 2024 status statement.
Talos also noted that updated Snort rule sets can detect exploitation attempts. Detection can support monitoring, but it is not a software fix and should not be treated as a substitute for vendor remediation. The cited reports do not establish a current workaround, so do not assume a particular mitigation is safe or effective without guidance from the product maintainer.
Quick Recap
Best Value
- 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
- 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
- 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
- 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
- Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q
Rank #4
- Enjoy the benefits of Wireless-N in your home--ideal for wireless Internet usage and home office productivity
- Connect your computers, wireless printers, smartphones, and other wireless devices at up to 300 Mbps of transfer speed
- Use four Fast Ethernet (10/100 Mbps) ports to directly connect wired devices
What should operators do?
- Inventory MC-LR devices and GoCast hosts, recording exact model, software/build version, and where their management interfaces or APIs are reachable.
- Compare those details with current MC Technologies and GoCast maintainer security advisories; do not infer that all product variants share the same affected status.
- For MC-LR, review access to the authenticated web interface and the processes for I/O configuration and configuration-file imports while following vendor guidance.
- For GoCast, review exposure of the HTTP API and app registration or deregistration endpoints, and apply maintainer-recommended remediation if available.
- Use Snort detection support where appropriate to monitor for exploitation attempts, while handling remediation separately.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
