ARTICLE - openwrt/dd-wrt based modem/router vulnerability?

Tom Buskey tom at buskey.name
Wed Mar 25 15:05:58 EDT 2009


Summary:

1) IFF your router is MIPS based (Linksys)
2) AND IF you have telnet/SSH/http open to the WAN (and wireless someday?)
3) AND IF you have one of the 6000 logins with one of the 13,000 password
(week password)
THEN you're vulnerable.

I'd imagine it'd be easy for the bot to evolve to use the wireless to search
out other routers via wireless.  That would add 4) IF you don't use WPA2.



2009/3/25 Michael ODonnell <michael.odonnell at comcast.net>

>
> FWIW:
>
>   http://apcmag.com/new-worm-can-infect-home-modemrouters.htm
>
> _______________________________________________
> gnhlug-discuss mailing list
> gnhlug-discuss at mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20090325/c2593873/attachment.html 


More information about the gnhlug-discuss mailing list