An attacker on the identical community may view recordsdata on a related laptop, USB or SD card.
Pioneer DJ’s dad or mum firm AlphaTheta has disclosed a safety vulnerability in PRO DJ LINK, the networking protocol that connects CDJs, XDJs and rekordbox software program. The vulnerability may let an unauthorized person on the identical community view recordsdata saved on a DJ’s laptop or on a USB or SD card plugged into an affected participant.
The corporate stated it has not confirmed any instances of precise harm from the flaw, however urged customers to replace rekordbox to the newest model, keep away from loading delicate recordsdata onto USB or SD playing cards used with PRO DJ LINK, and join gamers solely to safe, password-protected networks.
The vulnerability was first reported by Triode, a San Francisco-based DJ, producer and developer. In keeping with his clarification, PRO DJ LINK depends on a Community File System server that begins routinely, on rekordbox when Hyperlink Export mode is enabled, and on {hardware} just like the CDJ-3000 as quickly because the unit boots. That server will be pointed at any file path on the related system, and its authentication makes use of a hard and fast worth quite than a singular password, successfully leaving it open to anybody on the community, in line with our mates at CDM.
Affected {hardware} consists of the CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X, CDJ-900NXS, XDJ-1000MK2, XDJ-700, and the XDJ-AZ and XDJ-XZ all-in-ones. DJM mixers will not be affected. Rekordbox variations 7.2.17 and 6.8.7 embrace partial fixes, whereas the iOS and Android apps are nonetheless awaiting patches.
Notably, the chance solely applies to networked setups. DJs syncing gear over a closed, offline connection, or loading music through USB with out Wi-Fi concerned, will not be uncovered. The hazard surfaces particularly at venues working PRO DJ LINK over open or unsecured Wi-Fi, quite than a personal, password-protected community.
You’ll be able to learn AlphaTheta’s official announcement and obtain firmware updates right here.
