Login or Join Now

Upload your photos, chat, win prizes and much more

Username:
Password:
Remember Me

Can't Access your Account?

New to ePHOTOzine? Join ePHOTOzine for free!

Like 0

Router Security Flaw

Join Now

Join ePHOTOzine, the friendliest photography community.

Upload photos, chat with photographers, win prizes and much more for free!

Britman
Britman  81669 forum posts England
13 Feb 2013 - 10:16 AM

MAJOR SECURITY FLAW IN ROUTERS
This isn't well known by the general public, there's a major security flaw in routers that have UPnP (universal plug and play) enabled.
Ideally UPnP should be turned off. To test your routers visit run the test.

Please take this seriously.

https://www.grc.com/shieldsup

Please share this.

Sponsored Links
Sponsored Links 
13 Feb 2013 - 10:16 AM

Join ePHOTOzine for free and remove these adverts.

JJGEE
JJGEE  96205 forum posts England18 Constructive Critique Points
13 Feb 2013 - 10:21 AM

Perhaps it is not such a good idea to run the test.

How do we know the provenance of the information given above ?

Britman
Britman  81669 forum posts England
13 Feb 2013 - 10:31 AM


Quote: Perhaps it is not such a good idea to run the test.

How do we know the provenance of the information given above ?

That's a fair point. I know it's safe but my word don't mean sh*t.

Best bet then is to login into your routers admin and turn off UPnP. Then you'll know you're safe from this flaw.

ST
ST  226 forum posts United Kingdom
13 Feb 2013 - 11:01 AM

I've used GRC Shields Up application to test my routers and port security for a number of years. It is a good site IMHO

AlanPerkins
13 Feb 2013 - 11:21 AM


Quote: I've used GRC Shields Up application to test my routers and port security for a number of years. It is a good site IMHO

Same here - it's a very good site.

MartinBrown
MartinBrown e2 Member 4116 forum postsMartinBrown vcard England
13 Feb 2013 - 12:45 PM

But how many people actually change there routers login details? I bet 80 percent of people just leave it alone after being installed by the broadband provider.

Most access is USERNAME - User and PASSWORD as password.!

digicammad
digicammad  1121988 forum posts United Kingdom37 Constructive Critique Points
13 Feb 2013 - 1:02 PM

Another vote for GRC.

User_Removed
13 Feb 2013 - 8:24 PM

And another...

User_Removed
13 Feb 2013 - 9:17 PM

Steve Gibson is T H E man when it comes to these - and other internet security-related - matters.

Here is the result of my setup when tested by him just now...

grc.jpg

Wink

(This man writes in machine-code!!)

Last Modified By User_Removed at 13 Feb 2013 - 9:18 PM
Paul Morgan
Paul Morgan e2 Member 1314809 forum postsPaul Morgan vcard England6 Constructive Critique Points
13 Feb 2013 - 10:12 PM

[quote]Ideally UPnP should be turned off. To test your routers visit run the test.

Really

Big Bri
Big Bri  1315546 forum posts England
13 Feb 2013 - 10:45 PM

Really? I have UPnP turned ON, but my firewall prevents it being accessed from outside my network. Shields UP confirms no response.

keithh
keithh  1022726 forum posts Wallis and Futuna29 Constructive Critique Points
13 Feb 2013 - 10:53 PM

I ran the test. Router is safe but I'm nearly out of butter and the microwave needs cleaning.

Britman
Britman  81669 forum posts England
13 Feb 2013 - 10:58 PM

Yes really, if someone is unhappy running the test and to be sure they are not vulnerable then disabling UPnP is a good idea.

But hey each to their own, I'm only trying to make people aware, if they don't give a f*ck about their networks safety!

Big Bri
Big Bri  1315546 forum posts England
13 Feb 2013 - 11:02 PM

So.... as I said, I ran the test, it says everything is OK, but I have UPnP turned ON. Hence my question... really?

strawman
strawman  1021997 forum posts United Kingdom16 Constructive Critique Points
13 Feb 2013 - 11:55 PM

I have UPnP turned on like Bri and my system passed the test. And like Bri's system my firewall prevented it being accessed from outside my network. What is the problem with UPnP. And does that not just apply to wireless connections? I thought the routers applied different levels of checks to outside of network (i.e Internet), inside eithernet wired connection, wireless device.

Add a Comment

You must be a member to leave a comment

Username:
Password:
Remember me:
Un-tick this box if you want to login each time you visit.