Windows 10: Study shows 5 out of 6 routers inadequately updated for security flaws

Brink · Oct 2, 2018

A new study by a US consumer nonprofit has found that five out of six home routers are inadequately updated for security flaws, leaving the devices, and indirectly their users, vulnerable to hacking.

Carried out by the American Consumer Institute (ACI), the study analyzed a sample of 186 SOHO (small office/home office) WiFi routers from 14 different vendors with a presence on the US market.

ACI experts looked at the firmware version the routers were running and searched public vulnerabilities databases for known security flaws affecting each device's firmware.

"In total, there was a staggering number of 32,003 known vulnerabilities found in the sample," said ACI experts in the study published last week.

"Our analysis shows that of the 186 sampled routers, 155 (83%) were found to have vulnerabilities to potential cyber attacks, in the router firmware, with an average of 172 vulnerabilities per router, or 186 vulnerabilities per router for the identified 155 routers," ACI experts said.

Of the total 32,003 security flaws, more than a quarter were vulnerabilities that received the two highest severity ratings of "critical" and "high-risk" respectively.

"Our analysis shows that, on average, routers contained 12 critical vulnerabilities and 36 high-risk vulnerabilities, across the entire sample," researchers said.

These are staggeringly large numbers...
Click to expand...

Read more:

New study finds 5 of every 6 routers are inadequately updated for security flaws | ZDNet

http://www.theamericanconsumer.org/w...rabilities.pdf

:)

Brink · Oct 2, 2018

FTC files lawsuit against D-Link for router and camera security flaws

The United States Federal Trade Commission (FTC) has filed a lawsuit against D-Link, claiming the company put thousands of customers at risk of unauthorised access by failing to secure its IP cameras and routers, after security vulnerabilities were discovered last year.

The lawsuit [PDF], filed in the District Court in San Francisco on January 5, claims that D-Link "repeatedly have failed to take reasonable software testing and remediation measures to protect their routers and IP cameras against well-known and easily preventable software security flaws" in several of its Internet of Things (IoT) devices.

Specifically, the FTC said these alleged security failures amounted to D-Link hard-coding login credentials or backdoors that allowed unauthorised access to live feeds in its camera software; mishandling its own software private sign-in key code so it was exposed online for around six months; failing to take reasonable steps to prevent a known vulnerability allowing attackers to remotely control and send commands to routers; and failing to use free software that has been available since 2008 to secure its users' app logins, instead storing them in clear, readable text on users' mobile devices...
Click to expand...

Read more: FTC files lawsuit against D-Link for router and camera security flaws | ZDNet

IggSter · Oct 2, 2018

How to factory reset Cisco 1700 Router

Hopefully I can help you here....its a very common thing to happen.

First, I take it you dont know the passwords for console access or telnet/ssh?

I will assume that these devices belong to you.

step 1. Plug a cisco console cable into a serial port on your pc
step 2. Plug other end into Cisco console port
step 3. Using hyperterm or putty or similar connect to the serial port
step 4. boot router, and make sure you clearly can see the output (this confirms you have good serial comms)
step 5. if this fails, adjust the comm port settings (9600, 8,1,n are the default)
step 6. now you have to do the only hard part...send the break command:

Break command list: Break Commands

Go down the list and match your OS and SW and try the sequence suggested.

If this fails several times do what I do: Install putty (free) and then to send a break so you can get into rommom just hit "ctrl-a b".

silkstone · Oct 2, 2018

Router behind a router = more secure?

Thanks.

So it is more secure from both exploits and brute force to have router > Router > Computers. An attacker would have to find exploits in both routers before gaining access to a network?

I would not worry about some hacker targeting you unless you advertise some type of prize "info" on your network. A simple Router with firewall settings should be enough if you set it up properly. If this was a business I would suggest a external firewall such as a fortigate 200 series.
Click to expand...

I'm not that worried, I just wanted to know the theory as I seem to get conflicting information. I had always assumed that having a router behind a router would be better security-wise.

I am pretty sure that my router would be on the list of those compromised in Vietnam by malware. The malware only changed the primary DNS for the router, so I would still not be immune to this kind of attack if someone gained access to my internet facing router, but it got me thinking more about security.

Windows 10: Study shows 5 out of 6 routers inadequately updated for security flaws

Study shows 5 out of 6 routers inadequately updated for security flaws

Study shows 5 out of 6 routers inadequately updated for security flaws

Study shows 5 out of 6 routers inadequately updated for security flaws

Study shows 5 out of 6 routers inadequately updated for security flaws - Similar Threads - Study shows routers

New Microsoft Security Signals study shows firmware attacks on rise

Sleep Study not showing % of battery

Wifi 6 adapter compatibility with 5.0ghz routers (WiFi 5)

Zoom flaw and security

Windows 10 security flaw?

Windows 10 security flaws

Windows 10 security flaw

Unfixable security flaw in Secure Boot ??

FTC files lawsuit against D-Link for router and camera security flaws