nanog mailing list archives
Linksys WAG200G - Information disclosure (fwd)
From: Gadi Evron <ge () linuxbox org>
Date: Tue, 20 Mar 2007 16:48:19 -0500 (CDT)
I wonder what their security process is for other types of routers? ---------- Forwarded message ---------- Date: 20 Mar 2007 20:31:01 -0000 From: dniggebrugge () hotmail com To: bugtraq () securityfocus com Subject: Linksys WAG200G - Information disclosure Hi there, About 2 months ago I bought a wireless ADSL modem/router, the Linksys WAG200G. Just did some basic security checks and to my utter surprise the device responded with about all sensitive information it knows: * Product model * Password webinterface * Username PPPoA * Password PPPoA * SSID * WPA Passphrase I notified Linksys, got some regular support questions and was then assured my concerns would be forwarded to the product engineers. Some weeks later I tried again, same message, silence since then. My firmware version is 1.01.01, latest available for this type. 'Technical' info: Sent a packet to UDP port 916. Answer contains mentioned information. (LAN interface and Wireless interface) Greetings, Daniƫl Niggebrugge
Current thread:
- Linksys WAG200G - Information disclosure (fwd) Gadi Evron (Mar 20)
- Re: Linksys WAG200G - Information disclosure (fwd) Robert Boyle (Mar 20)
- Re: Linksys WAG200G - Information disclosure (fwd) Mike Caudill (Mar 21)
- Re: Linksys WAG200G - Information disclosure (fwd) Gadi Evron (Mar 21)
- Re: Linksys WAG200G - Information disclosure (fwd) Peter Dambier (Mar 27)
- Re: Linksys WAG200G - Information disclosure (fwd) Mike Caudill (Mar 21)
- Re: Linksys WAG200G - Information disclosure (fwd) Robert Boyle (Mar 20)