3 ms·

Archive: https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials/ https://web

Archive: https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials/ https://web.archive.org/web/20181223120225/https://badpacket... I have one of these routers, excuse me while I panic/check the vulnerability. Edit: Checked. It sure leaks the password in plaintext to a simple curl call. I have no words.

cissou 8y ago
Any patch available beyond making your box unavailable to the internet?
- tyingq 8y ago
  OpenWRT seems to be an option if it's Livebox 2.1 or earlier.
  - tropin 8y ago
    Well, an option if you don't mind losing ADSL(1) and wifi from your ADSL router. (1) It's not clear: the docs mention an Annex working but it's not the same as the one the hardware provides?