If you haven’t already, take some time to secure it, and be sure to check in once a month or so to confirm that you have the latest firmware available. IOActive highlighted the following routers as potentially vulnerable, some of which have received high marks from Tom’s Guide reviews:Īs always, it’s important to remember that your router is your access point to the whole Internet, for good and ill. With access to the deepest level of the router’s interface, cybercriminals could either take it over outright, or - and this is more likely - create invisible “backdoor” access points for themselves, which would allow them to monitor anything on a user’s network, anytime they like, or even redirect traffic to malicious websites, without arousing suspicion. The most dangerous vulnerability allows attackers to hijack a router and gain root privileges.

They eventually released the WRT54G firmware’s source code after some pressure. Linksys didn’t release source code when they released the router, although they were supposed to. Linksys WRT54G Ultimate Hacking by Paul Asadoorian, Larry Pesce Get Linksys WRT54G Ultimate. These routers ran a firmware based on Linux. How to Use a Custom Firmware on Your Router and Why You Might. Another vulnerability lets attackers bypass the router’s authentication procedures and collect information on connected devices as well as Wi-Fi passwords. Custom router firmware first took off with the Linksys WRT54G router released back in 2003. Two of the issues could let a cybercriminal block a router's functions with a denial-of-service attack, making internet access impossible. 'Linksys responded to a vulnerability submission from Bad Packets on 7th May 2019 regarding a potential sensitive information disclosure flaw: CVE-2014-8244 (which was fixed in 2014). Here's how to do that.Īs stated above, IOActive did not explain any of the vulnerabilities in great detail, but did give an idea of how some of the more dangerous ones might work.

Users should also change the default administrator password for the Linksys router software, although frankly, you should have done that by now anyway having a default password is always a vulnerability, even when there no specific exploits to target it. The company also recommends that users enable Automatic Updates, so that they’ll receive patches for the vulnerabilities as soon as patches are available.

Linksys provides full instructions on how to do this. To disable the feature, you’ll need to access your Linksys cloud account, then select Guest Access and toggle the switch to Off. For those who aren’t familiar with the Guest Network feature, it lets guests in your home or office use your wireless network under an alternate name and password.

Linksys hacked firmware