Linksys-routers Vulnerable due to multiple cgi-scripts

by Hilbert Hagedoorn on: 12/08/2015 04:27 PM | source: | 6 comment(s)

Linksys routers ranging from model EA6100 up-to EA6300 are Vulnerable and exploitable due to multiple cgi-scripts. The scripts can be used by an unauthorized attacker, which can get them access to the master password of the device.

Linksys' EA6100-6300 wireless routers will need a patch reports the register: KoreLogic has published an advisory saying that CGI scripts in the admin interface open the device up to remote attackers. Since it's a consumer product the risk is high that most of the devices out there never would be patched. The bad scripts include the bootloader, sysinfo.cgi, ezwifi_cfg.cgi, qos_info.cgi and others.

The disclosure is attributed to Matt Bergin of KoreLogic. His proof-of-concept code provided with the advisory includes testing the target device to see if its admin password remains set to default. At the time of writing, Linksys has not published a fix, so it's at the very least recommended to shut down remote admin access to any devices you're in contact with.

2 pages 1 2

Daftshadow
Senior Member

Posts: 1331
Joined: 2004-07-10

#5203777 Posted on: 12/10/2015 09:14 AM

Not sure if I can really recommend TP-Link. Bought one last year; dual band model, worked fine for about 3 months and then it just went dead. Wasted $70. Switched to Linksys and has not caused any major issues for well over a year now. Although it does drop the connection every now and then but doesn't happen often. Compared to a Netgear one I had, that one was garbage.

2 pages 1 2

Post New Comment

Click here to post a comment for this news story on the message forum.