Security Vulnerability Discovered in PRO DJ LINK for CDJs and Rekordbox

AlphaTheta has announced a significant security vulnerability affecting the PRO DJ LINK feature in various CDJ and XDJ models, as well as all versions of Rekordbox software. The vulnerability allows unauthorized access to data stored on connected devices, including Windows PCs, Macs, and USB/SD cards in CDJ/XDJ units. This issue arises only when devices are connected to a network, particularly public or insecure ones. AlphaTheta has not confirmed any instances of exploitation but advises users to update their firmware and software as patches become available. Users are also urged to avoid using critical files on USB sticks during performances. The company is preparing fixes and will provide updates on their progress. The vulnerability was reported by DJ and developer Chris L, who highlighted the risks associated with the networked features of the devices.

Key Points: • A security vulnerability in PRO DJ LINK affects multiple CDJ/XDJ models and Rekordbox software. • Unauthorized access could expose sensitive data on connected devices when on insecure networks. • AlphaTheta is working on patches and advises users to update their systems immediately.