North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Linksys WAG200G - Information disclosure (fwd)

  • From: Gadi Evron
  • Date: Tue Mar 20 17:51:04 2007

I wonder what their security process is for other types of routers?

---------- Forwarded message ----------
Date: 20 Mar 2007 20:31:01 -0000
From: [email protected]
To: [email protected]
Subject: Linksys WAG200G - Information disclosure

Hi there,

About 2 months ago I bought a wireless ADSL modem/router, the Linksys WAG200G. Just did some basic security checks and to my utter surprise the device responded with about all sensitive information it knows:

* Product model
* Password webinterface
* Username PPPoA
* Password PPPoA
* WPA Passphrase

I notified Linksys, got some regular support questions and was then assured my concerns would be forwarded to the product engineers. Some weeks later I tried again, same message, silence since then.

My firmware version is 1.01.01, latest available for this type.

'Technical' info:
Sent a packet to UDP port 916.
Answer contains mentioned information.
(LAN interface and Wireless interface)

Daniël Niggebrugge