• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Technologous - Managed IT Solutions Bryan/College Station

  • Home
  • About
    • Areas We Serve
    • Our Leadership
      • Chris Dawson
      • Ian Soares
  • IT Services
    • Managed IT
    • Support IT
    • Cloud IT
  • Blog
  • Request a Consultation
  • Contact
You are here: Home / Blog / Vulnerabilities Found In Consumer Based Routers And Devices

Vulnerabilities Found In Consumer Based Routers And Devices

The SOHOpelessly Broken 2.0 study has been released by Independent Security Evaluators.

The picture it paints of routers and the so-called ‘smart’ devices that make up the rapidly expanding Internet of Things (IoT) is not pretty.

The researchers sum up their findings as follows:

“Today, we show that security controls put in place by device manufacturers are insufficient against attacks carried out by remote adversaries. This research project aimed to uncover and leverage new techniques to circumvent these new security controls in embedded devices.”

The research team investigated several SOHO routers and NAS devices offered by a range of manufacturers, including:

  • ASUS
  • Asustor (a subsidiary of ASUS)
  • Buffalo
  • Drobo
  • Lenovo
  • Netgear
  • QNAP
  • Seagate
  • Synology
  • TerraMaster
  • Xiaomi
  • Zioncom
  • Zyxel

Sadly, devices from every manufacturer listed above had at least one web app vulnerability that could allow a remote attacker to gain access to the administrative panel of the device in question. Worse, the researchers reported that they were able to obtain root shells on 12 of the devices, giving them complete control. In six cases, they were able to gain complete control remotely and without authentication.

The most at-risk routers the group tested are the:

  • Asustor AS-602T
  • Buffalo TeraStation TS5600D1206
  • TerraMaster F2-420
  • Drobo 5N2
  • Netgear Nighthawk R9000
  • TOTOLINK (Zioncom) A3002RU

Since the publication of the SOHOpelessly Broken 1.0 report, the research team did say that the general state of security on IoT devices had improved somewhat. That’s a low bar given the sorry state of IoT security, to begin with. While things have no doubt improved, there are still miles to go before IoT security could be called anything approaching robust.

In fact, many of the IoT devices being sold today still lack basic web application features like browser security headers and anti-CSRF tokens. Until these kinds of issues are addressed, the conclusions fronted by the SOHOpelessly Broken 3.0 report won’t be much better than they are now.

September 30, 2019 Filed Under: Blog Tagged With: devices, routers, security, SOHO

Primary Sidebar

GET OUR BLOG IN YOUR EMAIL!

Archives

  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • February 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • August 2018

Tags

adobe android App Apple attack Attacks Breach Browser Chrome Credit Card Dark Web Data Database Data Breach Email Facebook Firefox gmail Google Google Chrome government hacker Hackers information Intel iOS iPhone malware Microsoft Microsoft Windows 10 office 365 pandemic Password Passwords patch Phishing ransomeware Ransomware security Social Media Update Vulnerability Wifi Windows Windows 10

Footer

Contact Us

Address: 3091 University Drive, Unit 210, Bryan, Texas 77802
Phone: 979-217-1226

Our Blog

  • Rise In PC Hardware Sales Blamed on Pandemic February 26, 2021
  • Healthcare Ransomware Problem Getting Worse January 30, 2021
  • Chrome Helps Users Check Passwords For Strength January 29, 2021
  • DuckDuckGo Search Engine Sees Huge Growth January 28, 2021
  • Malware Is Android’s Worst Nightmare January 27, 2021

Search

Follow Us

  • Facebook
  • Home
  • About
  • Resources
  • Contact
  • Our Leadership
  • Why Choose Us?
  • IT Services
  • Request a Consultation

Copyright © 2021| All Rights Reserved | Powered By Technologous, LLC | Log in