SMC8104 combination cable modem and wireless router vulnerability

Mumbodog · 02-Nov-2009, 01:21 PM #1

http://www.v3.co.uk/v3/news/2251925/...aises-security

http://chenosaurus.com/2009/10/

JohnWill · 02-Nov-2009, 04:28 PM #2

Well, this is somewhat of a half-truth.

Many routers come with WEP as a default, but you can configure better encryption. This router supports WPA/WPA2, so that's not really an issue unless you're naive. Gee, a lot of routers come with wireless enabled with NO security, talk about a security hole!

Mumbodog · 02-Nov-2009, 05:21 PM #3

[QUOTE]After poking around using the customer account, I found that access to the admin features of the router has been disabled via Javascript. You heard me correct, the web admin for the router simply uses a script to hide certain menu options when the user does not have admin privileges. By simply disabling Javascript in the browser, I was able to access all the features of the router. With that access, I am now able to change the wifi settings, port-forwarding, etc.
QUOTE]

I don't think this is the norm on routers.

.

JohnWill · 02-Nov-2009, 07:40 PM #4

I think if you get into the router's configuration files, you can probably do that with any router and Javascript.

Tag Cloud
access acer asus bios bsod computer crash dns drive driver drivers error ethernet excel freeze games gaming graphics hard drive hardware hdmi internet java laptop malware memory monitor motherboard network printer problem ram random registry router slow software sound trojan usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Search
Search for:

Find the solution to yourcomputer problem!

Find the solution to your
computer problem!