Slashdot Mirror

← Back to Stories (view on slashdot.org)

At Least 700,000 Routers Given To Customers By ISPs Are Vulnerable To Hacking

Posted by Soulskill on from the seeds-of-a-class-action dept.

itwbennett writes: More than 700,000 ADSL routers provided to customers by ISPs around the world contain serious flaws that allow remote hackers to take control of them. Most of the routers have a 'directory traversal' flaw in a firmware component called webproc.cgi that allows hackers to extract sensitive configuration data, including administrative credentials. The flaw isn't new and has been reported by multiple researchers since 2011 in various router models.

3 of 96 comments (clear)

  1. Run your own equipment by chuckinator · · Score: 5, Informative

    I've always run my own hardwsare for years for a reason: it gives me a buffer beyond which I know the ISP no longer has control of my home network. 2x OpenWRT routers, a managed switch in the middle, and a lightweight embedded PC running the essential network services (dhcp, dns, ntp, etc), and the IT management overhead is fairly low.

    1. Re:Run your own equipment by RabidReindeer · · Score: 5, Funny

      Well, if EVERYONE decides they'll mooch off their neightbor, it's Communism!

      And if no one actually HAS WiFi to mooch off of, that's Soviet-style Communism.

  2. Belkin N150 by Anonymous Coward · · Score: 5, Informative

    Why doesn't the OP mention that they're only talking about the Belkin N150, with various versions of the firmware prior to v1.00.08?