WiFi routers packed with vulnerabilities

Stefan Mileschin · 7th December 2021, 08:14

Nine routers had of 226 potential vulnerabilities

Insecurity experts tested nine popular routers made by Asus, AVM, D-Link, Netgear, Edimax, TP-Link, Synology, and Linksys, and found that they were packed with 226 potential vulnerabilities.

Researchers at IoT Inspector carried out the security tests in collaboration with CHIP magazine, focusing on models used mainly by small firms and home users.

IoT Inspector CTO Florian Lukavsky said the vendors provided them with the latest versions which had the best firmware.

The firmware versions were automatically analyzed by IoT Inspector and checked for more than 5,000 CVEs and other security issues.

While not all flaws carried the same risk, the team found some common problems that affected most of the tested models:

- Outdated Linux kernel in the firmware
- Outdated multimedia and VPN functions
- Over-reliance on older versions of BusyBox
- Use of weak default passwords like "admin"
- Presence of hardcoded credentials in plain text form....

https://fudzilla.com/news/53999-wifi...ulnerabilities

7th December 2021, 08:14	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,575	WiFi routers packed with vulnerabilities Nine routers had of 226 potential vulnerabilities Insecurity experts tested nine popular routers made by Asus, AVM, D-Link, Netgear, Edimax, TP-Link, Synology, and Linksys, and found that they were packed with 226 potential vulnerabilities. Researchers at IoT Inspector carried out the security tests in collaboration with CHIP magazine, focusing on models used mainly by small firms and home users. IoT Inspector CTO Florian Lukavsky said the vendors provided them with the latest versions which had the best firmware. The firmware versions were automatically analyzed by IoT Inspector and checked for more than 5,000 CVEs and other security issues. While not all flaws carried the same risk, the team found some common problems that affected most of the tested models: - Outdated Linux kernel in the firmware - Outdated multimedia and VPN functions - Over-reliance on older versions of BusyBox - Use of weak default passwords like "admin" - Presence of hardcoded credentials in plain text form.... https://fudzilla.com/news/53999-wifi...ulnerabilities

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Linksys' first WiFi 6E routers are now available to buy	Stefan Mileschin	WebNews	0	30th April 2021 11:07
Amazon's new Eero mesh routers support WiFi 6	Stefan Mileschin	WebNews	0	25th September 2020 10:26
TP-Link adds WiFi 6 to its affordable mesh routers	Stefan Mileschin	WebNews	0	6th January 2020 15:32
Netgear's first WiFi 6 routers look like stealth fighters	Stefan Mileschin	WebNews	0	8th November 2018 10:10
Apple discontinues its AirPort WiFi routers	Stefan Mileschin	WebNews	0	27th April 2018 15:45
ASUS will use routers you already own for a mesh WiFi setup	Stefan Mileschin	WebNews	0	5th January 2018 06:27
Netgear WiFi routers are vulnerable to more security exploits	Stefan Mileschin	WebNews	0	2nd February 2017 17:45
Apple reportedly stops making WiFi routers	Stefan Mileschin	WebNews	0	23rd November 2016 07:21
Virgin Media's new WiFi network uses customer routers	Stefan Mileschin	WebNews	0	20th August 2015 08:43
Universal-protection-for-software vulnerabilities & do-not-track in Sitecom routers	Stefan Mileschin	WebNews	0	26th April 2013 08:21