Backdoor found in Linksys, Netgear Routers

Re:Backdoor found in Linksys, Netgear Routers by jacob019 on Wednesday January 01, 2014 @07:02PM (#6997409)

is this backdoor only served up on the wlan or is it also exposed to the internet?

[ Parent | on HN ]

Re:Backdoor found in Linksys, Netgear Routers by tagliala on Wednesday January 01, 2014 @07:19PM (#6997466)

fortunately, on my wag160n it doesn't seem exposed to the internet

[ Parent | on HN ]

Re:Backdoor found in Linksys, Netgear Routers by Cakez0r on Wednesday January 01, 2014 @10:22PM (#6998012)

That's not to say somebody can't embed something on a web page (E.G. flash) that connects to 192.168.1.1 and enables configuration from WAN :)

[ Parent | on HN ]

Re:Backdoor found in Linksys, Netgear Routers by nadaviv on Thursday January 02, 2014 @12:32AM (#6998362)

Flash won't let you open connections to other hosts (unless there's a crossdomain.xml file that allows it).

With html/javascript you can send http requests to other hosts, but you can't read the response. It seems like the backdoor isn't accessed over http, so that wouldn't help you either.

[ Parent | on HN ]