Open-source firmware bug exposes router vulnerabilties

[Rik]

El Reg reports that:

A hacker has discovered a critical vulnerability in open-source firmware available for wireless routers made my Linksys and other manufacturers that allows attackers to remotely penetrate the device and take full control of it.

The remote root vulnerability affects the most recent version of DD-WRT, a piece of firmware many router users install to give their device capabilities not available by default. The bug allows unauthenticated users to remotely gain root access simply by luring someone on the local network to a malicious website.

DD-WRT is open-source firmware that runs more than 200 different models of wireless routers and embedded devices, including those made Linksys, D-Link, Buffalo, and Netgear.

We really do have to work hard to stay safe these days.

[somanyholes]

if you want more info

http://www.milw0rm.com/exploits/9209

just seen it's already included in previous link , slaps himself.

[Sebby]

El Reg reports that:

We really do have to work hard to stay safe these days.

True, though it is an unofficial firmware, a bit like DGTeam, and therefore I'd say you should be aware of the associated risks when installing it.