Alarming to see a serious vulnerability in many consumer modem/routers.
When I read this I thought it was quite silly, people could just do a factory reset on their modems and manually update settings, but apparently it's not that simple. Many ISPs send out modems that only they can admin and these account for about half of affected devices.
Quote:
Over 135 million modems vulnerable to denial-of-service flaw
The flaw lets an attacker cut off an entire network from the internet until the owner calls their provider to restore it.
More than 135 million modems are said to be vulnerable to a flaw that can leave users cut off from the internet -- just by someone clicking on a trick link.
The vulnerability, found in a modem used in millions of US households, can allow an attacker with access to the network to remotely reset the device, which wipes out the internet provider's settings and causing a denial-of-service attack. Every person and device on the network will permanently lose access to the internet until the modem owner contacts their internet provider.
|
Over 135 million modems vulnerable to denial-of-service flaw | ZDNet