4 ms·
I wish the headlines would be a bit more specific - ie, wireless router authentication bypass. The other key piece, is this bypass available from the internet
by whoknowswhat11 5y ago
I wish the headlines would be a bit more specific - ie, wireless router authentication bypass.
The other key piece, is this bypass available from the internet generally or just from LAN side. That's a key difference, and not clear - I've found when they say remote unauthenticated attacker often these vulns are NOT available WAN side.
So you often end up with a better headline of wireless router vulnerable to LAN side authentication bypass.
I haven't looked at this one.
But CVE as a headline is not that useful -> get past overbroad statements -> you might get to a more useful one sentance headline (these articles sometimes require reading 300+ words to even get a sense of what risk actually is - it's the new style).
- stargravy 5y agoIt depends on the model/Vendor. There were upwards of ~15k devices showing their web interface WAN side and it could be that it is enabled by default in some cases. You're right that the risk is dropped significantly if the web ui isn't showing WAN side (though could still be an issue for businesses using the router for public wifi, or in shared residences, etc).