hacker in France called "Eloi Vanderbeken" found a way to hack wireless routers Linksys NetGear and Christmas, and also distributed publicly exploit that secret too.
The secret exploit allows an attacker to change the password of the default admin panel without any administrator authentication.
Eloi forgot the password for your router Linksys WAG200G and was trying to figure it out, scanned it and found an open TCP port suspect. Investigated in the deep end and copy Linksys firmware download and then reverse-engineering it.
After an investigation 0n that port, he found that it was a secret backdoor that allows anyone to send commands based administration without administrator authentication. Well, it's a feat for which the password is actually forgot, but it can be dangerous for them, where-Near-by "Hackers located."
In the Above slides, tried to describe you what and how he found the secret exploit, below are the routers which are affected by the Exploit:
- Cisco RVS4000 fwv 2.0.3.2
- Cisco WAP4410N
- Cisco WRVS4400N
- Cisco WRVS4400N
- Diamond DSL642WLG / SerComm IP806Gx v2 TI
- LevelOne WBR3460B
- Linksys RVS4000 Firmware V1.3.3.5
- Linksys WAG120N
- Linksys WAG160n v1 and v2
- Linksys WAG200G
- Linksys WAG320N
- Linksys WAG54G2
- Linksys WAG54GS
- Linksys WRT350N v2 fw 2.00.19
- Linksys WRT300N fw 2.00.17
- Netgear DG834[∅, GB, N, PN, GT] version < 5
- Netgear DGN1000
- Netgear DGN1000[B] N150
- Netgear DGN2000B
- Netgear DGN3500
- Netgear DGND3300
- Netgear DGND3300Bv2 fwv 2.1.00.53_1.00.53GR
- Netgear DM111Pv2
- Netgear JNR3210
May be affected:
- all SerComm manufactured devices
- Linksys WAG160N
- Netgear DG934 probability: probability: 99.99%
- Netgear WG602, WGR614 (v3 doesn’t work, maybe others…)
- Netgear WPNT834
Here is the Exploit code, if you are looking for, and you can find a detailed list of routers which are affected or not HERE.
ليست هناك تعليقات:
إرسال تعليق