3 ms·

So which major vendor hasn't had a RCE on the LAN side? Even my current Asus router had an RCE on the LAN side a couple of years ago... MikroTik fixed both of

So which major vendor hasn't had a RCE on the LAN side? Even my current Asus router had an RCE on the LAN side a couple of years ago... MikroTik fixed both of the issues you referenced, just as Asus fixed the issue I referenced. So I see no specific reason not to use either a MikroTik or a Asus device (and keep both up to date). The only major thing I'd consider is: - Does the manufacturer respond constructively? - Is the device still receiving security updates/has no outstanding holes?

rhinoceraptor 9y ago
Considering that they can't even get user authentication right, I have pretty big doubts about the rest of their security. Hashing/salting passwords is not a new concept.
- carlhjerpe 9y ago
  It's hard to defend something like this, but i think it's important to know that this only affects MikroTik devices with the SMB service enabled (disabled by default). It's very bad, but they responded quickly and resolved the issue. One thing i'd say is worth mentioning is that they're still keeping "all" (all i know off) RouterBoard devices updated. We've had customers with gear many many years old, still updated with feature and security upgrades.