AlphaTheta has warned DJs about a security vulnerability affecting PRO DJ LINK in Rekordbox and a number of CDJ and XDJ models, which could potentially allow someone with unauthorised access to the network to view files stored on connected devices.
According to AlphaTheta’s official announcement, the vulnerability could expose data stored on a Windows PC or Mac running Rekordbox, as well as USB drives or SD cards inserted into affected CDJ/XDJ hardware connected to the same PRO DJ LINK network.
The company says it has not confirmed any cases where the vulnerability has resulted in damage, and is withholding further technical details until fixes have been made available.
For DJs, the important point is that this relates specifically to networked PRO DJ LINK setups. Simply preparing a Rekordbox USB and plugging it into a player does not by itself give somebody remote access to its contents. The risk arises if an unauthorised third party gains access to the PRO DJ LINK network being used by the equipment.
Which CDJ and XDJ models are affected?
AlphaTheta currently lists the following DJ players as affected:
CDJ-3000X | CDJ-3000 | CDJ-2000NXS2 | CDJ-1500X | CDJ-900NXS | XDJ-1000MK2 | XDJ-700
Firmware fixes for all seven are currently in progress. The XDJ-AZ and XDJ-XZ all-in-one systems are also confirmed as affected, with fixes being prepared.
Several other products appear on AlphaTheta’s response list but are not affected by the vulnerability itself. These include the XDJ-AN, OMNIS-DUO, OPUS-QUAD, XDJ-RX3, XDJ-RX2 and XDJ-RR. AlphaTheta nevertheless plans firmware updates for these models as part of wider security enhancements.
Rekordbox users should update now
The vulnerability also affects Rekordbox software.
AlphaTheta lists Rekordbox 7 for Windows and Mac as partially fixed from version 7.2.17 onwards, while Rekordbox 6 is partially fixed from version 6.8.7 onwards. Further updates are still planned for both versions.
The iOS and Android versions of Rekordbox are also affected, with fixes still in progress. AlphaTheta nevertheless recommends keeping both mobile and desktop versions updated to the latest available release.
Until the remaining fixes arrive, AlphaTheta is advising DJs not to use USB drives or SD cards containing sensitive data when using PRO DJ LINK. Anyone connecting compatible players via Wi-Fi should also make sure they are using a secure, password-protected network.
The latest fixes and affected products can be tracked via AlphaTheta’s official PRO DJ LINK security notice.
ADD AS PREFERRED SOURCE ON GOOGLE
