Flaw In Netgear Wi-Fi Routers Exposes Admin Password, WLAN Details

Posted by timothy on Tuesday February 17, 2015 @03:20AM from the oops-and-darnit dept.

An anonymous reader writes A number of Netgear home wireless routers sport a vulnerability that can be misused by unauthenticated attackers [here's the report at seclists.org] to obtain the administrator password, device serial number, WLAN details, and various details regarding clients connected to the device, claims systems/network engineer Peter Adkins. The vulnerability is found in the embedded SOAP service, which is a service that interacts with the Netgear Genie application that allows users to control (change WLAN credentials, SSIDs, parental control settings, etc.) their routers via their smartphones or computers.

1 of 57 comments (clear)

Min score:

Reason:

Sort:

Default password by jfdavis668 · 2015-02-17 03:38 · Score: 5, Insightful

I am always amazed at the number of times I have logged into wifi access points with the default admin password. I have actually logged in and fixed businesses configuration errors. If we can't even get people to change the password, all the rest of the security is useless.