Flaw In Linksys Routers Can Be Used To Create Botnet

Security researchers and Linksys are warning that multiples models of Linksys Smart Wi-Fi Routers have vulnerabilities that might be exploited to create a botnet. Here’s a list of the affected routers:

WRT Series
WRT1200AC
WRT1900AC
WRT1900ACS
WRT3200ACM

EAxxxx Series
EA2700
EA2750
EA3500
EA4500 v3
EA6100
EA6200
EA6300
EA6350 v2
EA6350 v3
EA6400
EA6500
EA6700
EA6900
EA7300
EA7400
EA7500
EA8300
EA8500
EA9200
EA9400
EA9500

A security advisory was issued by Linksys today which¬†includes a workaround for customers until final firmware updates are posted in the coming weeks….. Though I would classify some of what they are recommending as common sense, but here’s the workaround:

  1. Enable automatic updates: I don’t like to do that as updates sometimes cause issues. Thus I like to wait a day or two to see if anything is reported on the Internet before I update.
  2. Disable WiFi Guest Network: This is something that I recommend that you do as a matter of course as guest networks can be used as an attack vector.
  3. Change the default Administrator password: This falls under the category marked “duh” as there is no reason on God’s green earth why you should be using the default administrator password for any device ever.

If you want an idea of what the issue is that is prompting this reaction from Linksys, IOActive who are the researchers who found this issue have a great write up that you can read right here.

Advertisements

One Response to “Flaw In Linksys Routers Can Be Used To Create Botnet”

  1. […] might recall that I recently told you about vulnerabilities in numerous Linksys routers that were found by a security re… which if exploited could end up in the router becoming part of a botnet among other things. Linksys […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: