4 ms·
FTA: "Last year, researchers at ISE found that a staggering 100% of SOHO routers they evaluated were vulnerable to remote attacks." However, the linked study[1
by miles 12y ago
FTA: "Last year, researchers at ISE found that a staggering 100% of SOHO routers they evaluated were vulnerable to remote attacks."
However, the linked study[1] shows that:
1. 2 of the routers did not have remote exploits
2. All but 2 of the other routers required authenticated access to exploit remotely
Authenticated attacks "require that the attacker have access to credentials (or that default router credentials are used—an all-too-common situation) or that a victim is logged in with an active session at the time of the attack."
While default passwords may be common, virtually all routers have remote admin turned off by default as well.
[1] https://securityevaluators.com/knowledge/case_studies/routers/soho_router_hacks.php https://securityevaluators.com/knowledge/case_studies/router...
- AlyssaRowan 12y agoThe real fun comes when you can turn remote admin back on remotely. Oh, god, I wish I was joking.
- hornetblack 12y agoI did that to a ISP provided router. The company wouldn't enable port forwarding for games. So I did it myself. Why do those routers have open telnet interfaces.
- xorcist 12y agoThere's a lot of ways to access internal interfaces. By executing javascript on an internal computer for example. An img src is enough for simple requests. If the home router implements uPnP (many do), and if that implementation is insecure (all are), you can often pop holes from the outside. And that's just the two ideas to try first... Don't expect a disabled remote admin to protect you from anything else than automated bots.