|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Linksys WAG200G - Information disclosure (fwd)
I wonder what their security process is for other types of routers? ---------- Forwarded message ---------- Date: 20 Mar 2007 20:31:01 -0000 From: [email protected] To: [email protected] Subject: Linksys WAG200G - Information disclosure Hi there, About 2 months ago I bought a wireless ADSL modem/router, the Linksys WAG200G. Just did some basic security checks and to my utter surprise the device responded with about all sensitive information it knows: * Product model * Password webinterface * Username PPPoA * Password PPPoA * SSID * WPA Passphrase I notified Linksys, got some regular support questions and was then assured my concerns would be forwarded to the product engineers. Some weeks later I tried again, same message, silence since then. My firmware version is 1.01.01, latest available for this type. 'Technical' info: Sent a packet to UDP port 916. Answer contains mentioned information. (LAN interface and Wireless interface) Greetings, Daniël Niggebrugge
|