Backdoor found in Linksys and Netgear Routers

[99vw]

 

A hacker has uncovered a backdoor to combination wireless router/DSL modems that could allow an attacker to reset a machine's configuration and gain access to the administrative control panel. The attack, confirmed to work on several Linksys and Netgear devices, exploits an open port accessible over the wireless local network.

 

The backdoor requires that the attacker be on the local network, so this isn’t something that could be used to remotely attack DSL users. However, it could be used to commandeer a wireless access point and allow an attacker to get unfettered access to local network resources.

 

Fortunately, it looks to only be exploitable if your already on the LAN. However, this doesn't necessarily mean it's safe.

 

http://www.arstechnica.com/security/2014/01/backdoor-in-wireless-dsl-routers-lets-attacker-reset-router-get-admin/

[AlwaysFSX]

Wireless local network... Does not mean just LAN.

[Covalent]

Well i guess my Asus RT N66U is not compromised... it probably helps that it uses a skinned dd-wrt.

[Altecice]

DD-WRT is awesome, can turn a rubbish router into an awesome one that can cost x3 as much.

[ericlee30]

DD-WRT is awesome, can turn a rubbish router into an awesome one that can cost x3 as much.

But the DD-WRT router is one of the easiest routers to break into.

[Luc401]

Oooo show me how!

[Kevin_Walter]

Oooo show me how!

 

[99vw]

Wireless local network... Does not mean just LAN.

 

Could you explain more? I was just going off what the article said.

 

 

The backdoor requires that the attacker be on the local network, so this isn’t something that could be used to remotely attack DSL users. However, it could be used to commandeer a wireless access point and allow an attacker to get unfettered access to local network resources.