techPowerUp! Forums

Go Back   techPowerUp! Forums > Hardware > Networking & Security

Reply
 
Thread Tools
Old Feb 11, 2013, 05:41 AM   #1
Jetster
2000 Posts
 
Jetster's Avatar
 
Join Date: Jan 2010
Location: Oregon
Posts: 2,869 (2.35/day)
Thanks: 931
Thanked 861 Times in 630 Posts

System Specs

Security risk found for home routers

Evidently they have found a security risk in over a million routers with UPnP. It effects many brands

http://www.csoonline.com/article/727...rom-upnp-flaws

Here is a test for it

https://www.grc.com/shieldsup

My router Netgear WNDR4300

Last edited by Jetster; Feb 11, 2013 at 10:28 AM.
Jetster is online now  
Reply With Quote
The Following 12 Users Say Thank You to Jetster For This Useful Post:
Old Feb 11, 2013, 06:29 AM   #2
remixedcat
1000 Posts
 
remixedcat's Avatar
 
Join Date: May 2010
Posts: 1,179 (1.07/day)
Thanks: 754
Thanked 248 Times in 190 Posts

System Specs

Heard of this and my Amped Wireless R20000G and R10000 are not on any of the 3 lists!

http://remixedcat.blogspot.com/2013/...n-lots-of.html

I have a link to the lists as well....


I did both tests with UPnP on and I passed and go the "not responding" message instead of rejected message which the not responding message is the best one.

But both those routers ship with UPNP disabled.
__________________
System:Intel i5 3570K @ 3.4Ghz//ASRock Z77 Pro3//Coolemaster Hyper 212 Evo//16GB Corsair XMS3//EVGA Nvidia GTX 650Ti SSC 1GB//128GB Samsung 840 SSD/1.5TB Seagate HDD//Antec Three Hundred Two//620w Antec High Current Gamer HCG-620M//Windows Server 2012 x64 Standard
Misc:Samsung SyncMaster P2350 23in@1920x1080+LG Flatron 19in 1440x900//IoSafe Fireproof ext 500GB HDD//Amped Wireless R20000G high power router//APC BackUPS XS1000 UPS
Websites: AGNXNetworks//RemixedCat's Place Of Meow Blog

Last edited by remixedcat; Feb 11, 2013 at 01:18 PM.
remixedcat is offline  
Reply With Quote
The Following User Says Thank You to remixedcat For This Useful Post:
Old Feb 11, 2013, 07:22 AM   #3
james888
2000 Posts
 
james888's Avatar
 
Join Date: Jun 2011
Location: Idaho
Posts: 2,258 (3.25/day)
Thanks: 444
Thanked 425 Times in 317 Posts

System Specs

Was turned on by default. Now off. Nothing I used anyways. Thanks for the tip. Router is a netgear 3700.

Last edited by james888; Feb 11, 2013 at 09:26 PM.
james888 is online now  
Crunching for Team TPU
Reply With Quote
Old Feb 11, 2013, 07:27 AM   #4
HammerON
The Watchful Moderator
 
HammerON's Avatar
 
Join Date: Mar 2009
Location: The Cold North
Posts: 4,343 (2.82/day)
Thanks: 3,975
Thanked 2,869 Times in 1,540 Posts

System Specs

Shields up Captain:
"THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

(That's good news!)"
HammerON is online now  
Crunching for Team TPU
Reply With Quote
The Following User Says Thank You to HammerON For This Useful Post:
Old Feb 11, 2013, 08:08 AM   #5
1nf3rn0x
1000 Posts
 
1nf3rn0x's Avatar
 
Join Date: Sep 2009
Location: Sydney, Australia
Posts: 1,707 (1.27/day)
Thanks: 509
Thanked 331 Times in 242 Posts

System Specs

Safe
__________________

Last edited by 1nf3rn0x; Feb 11, 2013 at 06:42 PM.
1nf3rn0x is offline  
Reply With Quote
Old Feb 11, 2013, 08:26 AM   #6
AsRock
TPU addict
 
Join Date: Jun 2007
Location: US\ Uk Born
Posts: 8,789 (4.07/day)
Thanks: 1,673
Thanked 1,347 Times in 1,169 Posts

System Specs

Same here all blocked.
AsRock is offline  
Reply With Quote
Old Feb 11, 2013, 09:32 AM   #7
droopyRO
25 Posts
 
droopyRO's Avatar
 
Join Date: Feb 2012
Location: Romania
Posts: 33 (0.07/day)
Thanks: 23
Thanked 10 Times in 5 Posts
Send a message via Yahoo to droopyRO

System Specs

Safe here also ... but why is the FBI knocking on my door ?
droopyRO is offline  
Reply With Quote
Old Feb 11, 2013, 10:23 AM   #8
remixedcat
1000 Posts
 
remixedcat's Avatar
 
Join Date: May 2010
Posts: 1,179 (1.07/day)
Thanks: 754
Thanked 248 Times in 190 Posts

System Specs

also guys please specify what router you have here too... that would help others.
__________________
System:Intel i5 3570K @ 3.4Ghz//ASRock Z77 Pro3//Coolemaster Hyper 212 Evo//16GB Corsair XMS3//EVGA Nvidia GTX 650Ti SSC 1GB//128GB Samsung 840 SSD/1.5TB Seagate HDD//Antec Three Hundred Two//620w Antec High Current Gamer HCG-620M//Windows Server 2012 x64 Standard
Misc:Samsung SyncMaster P2350 23in@1920x1080+LG Flatron 19in 1440x900//IoSafe Fireproof ext 500GB HDD//Amped Wireless R20000G high power router//APC BackUPS XS1000 UPS
Websites: AGNXNetworks//RemixedCat's Place Of Meow Blog
remixedcat is offline  
Reply With Quote
The Following User Says Thank You to remixedcat For This Useful Post:
Old Feb 11, 2013, 11:05 AM   #9
AsRock
TPU addict
 
Join Date: Jun 2007
Location: US\ Uk Born
Posts: 8,789 (4.07/day)
Thanks: 1,673
Thanked 1,347 Times in 1,169 Posts

System Specs

Quote:
Originally Posted by remixedcat View Post
also guys please specify what router you have here too... that would help others.
WRT54G running Tomato
AsRock is offline  
Reply With Quote
Old Feb 11, 2013, 11:28 AM   #10
syeef
Banned
 
Join Date: Jul 2008
Location: Dhaka, Bangladesh
Posts: 280 (0.16/day)
Thanks: 151
Thanked 70 Times in 54 Posts

System Specs

Already read about this on NextPowerUp! on Feb 3rd.
http://www.nextpowerup.com/news/692/...g-devices.html


Quote:
Originally Posted by 1nf3rn0x View Post
Not Safe... Your IP is 58.168.116.239
syeef is offline  
Reply With Quote
The Following 2 Users Say Thank You to syeef For This Useful Post:
Old Feb 11, 2013, 11:41 AM   #11
syeef
Banned
 
Join Date: Jul 2008
Location: Dhaka, Bangladesh
Posts: 280 (0.16/day)
Thanks: 151
Thanked 70 Times in 54 Posts

System Specs

Looks like I am NOT Safe as well .




I am using a AWB RG300 4G WiMAX Modem/Router that was supplied by my ISP.
syeef is offline  
Reply With Quote
Old Feb 11, 2013, 11:51 AM   #12
_JP_
2000 Posts
 
_JP_'s Avatar
 
Join Date: Apr 2010
Location: Portugal
Posts: 2,112 (1.87/day)
Thanks: 1,952
Thanked 644 Times in 466 Posts

System Specs

Router Model: Conceptronic C54BRS4A v1.0 (Grey box)
Firmware Version: 2.02

UPnP ON
Results:
Quote:
THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

(That's good news!)
UPnP OFF
Results:
Quote:
THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

(That's good news!)
_JP_ is offline  
Reply With Quote
Old Feb 11, 2013, 12:31 PM   #13
Crap Daddy
2000 Posts
 
Crap Daddy's Avatar
 
Join Date: Oct 2010
Posts: 2,282 (2.44/day)
Thanks: 941
Thanked 963 Times in 671 Posts

System Specs

Everything's fine over here. I have D-link DIR 600 if that helps others.
Crap Daddy is offline  
Reply With Quote
Old Feb 11, 2013, 12:34 PM   #14
FordGT90Concept
"I go fast!1!11!1!"
 
FordGT90Concept's Avatar
 
Join Date: Oct 2008
Location: IA, USA
Posts: 10,574 (6.29/day)
Thanks: 1,752
Thanked 2,596 Times in 1,960 Posts

System Specs

Netopia 3341 ADSL Gateway (PPPoE)
D-Link DGL-4500 Router
Did not respond to UPnP probes.


Quote:
Originally Posted by syeef View Post
I am using a AWB RG300 4G WiMAX Modem/Router that was supplied by my ISP.
There's your problem.
__________________
Golden Rule of Programming: Never assume.

try { SteamDownload(); }
catch (Steamception ex) { RageQuit(); }

Last edited by FordGT90Concept; Feb 11, 2013 at 12:40 PM.
FordGT90Concept is online now  
Crunching for Team TPU
Reply With Quote
Old Feb 11, 2013, 12:35 PM   #15
TheMailMan78
Banstick Dummy
 
TheMailMan78's Avatar
 
Join Date: Jun 2007
Location: Crystal River, FL
Posts: 15,109 (6.93/day)
Thanks: 1,337
Thanked 6,829 Times in 3,739 Posts

System Specs

I have one router plugged into the web and another router plugged into that. If the primary router is safe so is the second one correct?
TheMailMan78 is offline  
Reply With Quote
Old Feb 11, 2013, 12:38 PM   #16
FordGT90Concept
"I go fast!1!11!1!"
 
FordGT90Concept's Avatar
 
Join Date: Oct 2008
Location: IA, USA
Posts: 10,574 (6.29/day)
Thanks: 1,752
Thanked 2,596 Times in 1,960 Posts

System Specs

Only if you are positive that the first router is not responding. If the first is passing it through to the second and the second is not responding, the first may still be vulnerable.
__________________
Golden Rule of Programming: Never assume.

try { SteamDownload(); }
catch (Steamception ex) { RageQuit(); }
FordGT90Concept is online now  
Crunching for Team TPU
Reply With Quote
The Following User Says Thank You to FordGT90Concept For This Useful Post:
Old Feb 11, 2013, 12:45 PM   #17
brandonwh64
Addicted to Bacon and StarCrunches!!!
 
brandonwh64's Avatar
 
Join Date: Sep 2009
Location: Chatsworth, GA
Posts: 13,562 (10.03/day)
Thanks: 2,146
Thanked 5,338 Times in 3,695 Posts
Send a message via ICQ to brandonwh64 Send a message via AIM to brandonwh64 Send a message via MSN to brandonwh64 Send a message via Yahoo to brandonwh64

System Specs

Quote:
Originally Posted by TheMailMan78 View Post
I have one router plugged into the web and another router plugged into that. If the primary router is safe so is the second one correct?
So you have two routers on the same network and why?
__________________
Cruncher's:
All GPU's
GPU's:
7970 3GB *Unlocked* = 8 Threads
5770 1GB OCed = 2 Threads
brandonwh64 is offline  
Crunching for Team TPU
Reply With Quote
Old Feb 11, 2013, 12:46 PM   #18
TheMailMan78
Banstick Dummy
 
TheMailMan78's Avatar
 
Join Date: Jun 2007
Location: Crystal River, FL
Posts: 15,109 (6.93/day)
Thanks: 1,337
Thanked 6,829 Times in 3,739 Posts

System Specs

Quote:
Originally Posted by FordGT90Concept View Post
Only if you are positive that the first router is not responding. If the first is passing it through to the second and the second is not responding, the first may still be vulnerable.
No the one I tested is the primary one. It didn't respond. The other one gets its internet connection from the primary one. No worries then. Thanks.

Quote:
Originally Posted by brandonwh64 View Post
So you have two routers on the same network and why?
Because one I have to use because I get my phone through it. However its not really the best wireless. So I have another router hooked up to it for wireless. Tablets and smart phones just don't like the primary router.
TheMailMan78 is offline  
Reply With Quote
Old Feb 11, 2013, 01:15 PM   #19
syeef
Banned
 
Join Date: Jul 2008
Location: Dhaka, Bangladesh
Posts: 280 (0.16/day)
Thanks: 151
Thanked 70 Times in 54 Posts

System Specs

Quote:
Originally Posted by FordGT90Concept View Post
Quote:
Originally Posted by syeef View Post
I am using a AWB RG300 4G WiMAX Modem/Router that was supplied by my ISP.
There's your problem.
My ISP only sells that Modem/Router and provides no option for 3rd-party Modem/Router.


With UPnP OFF I get:
Quote:
THE EQUIPMENT AT THE TARGET IP ADDRESS
ACTIVELY REJECTED OUR UPnP PROBES!


(That's good news!)
syeef is offline  
Reply With Quote
Old Feb 11, 2013, 01:17 PM   #20
remixedcat
1000 Posts
 
remixedcat's Avatar
 
Join Date: May 2010
Posts: 1,179 (1.07/day)
Thanks: 754
Thanked 248 Times in 190 Posts

System Specs

wow with UPNP off you should get the "not responding" instead of rejection... that's wierd...

I get the "not responding" message with UPNP on on my Amped.
__________________
System:Intel i5 3570K @ 3.4Ghz//ASRock Z77 Pro3//Coolemaster Hyper 212 Evo//16GB Corsair XMS3//EVGA Nvidia GTX 650Ti SSC 1GB//128GB Samsung 840 SSD/1.5TB Seagate HDD//Antec Three Hundred Two//620w Antec High Current Gamer HCG-620M//Windows Server 2012 x64 Standard
Misc:Samsung SyncMaster P2350 23in@1920x1080+LG Flatron 19in 1440x900//IoSafe Fireproof ext 500GB HDD//Amped Wireless R20000G high power router//APC BackUPS XS1000 UPS
Websites: AGNXNetworks//RemixedCat's Place Of Meow Blog
remixedcat is offline  
Reply With Quote
Old Feb 11, 2013, 01:30 PM   #21
Phusius
Banned
 
Join Date: Mar 2012
Posts: 1,262 (2.98/day)
Thanks: 621
Thanked 380 Times in 208 Posts

System Specs

I have ATT Uverse router, says im all safe on my end.
Phusius is offline  
Reply With Quote
Old Feb 11, 2013, 01:58 PM   #22
erixx
2000 Posts
 
erixx's Avatar
 
Join Date: Mar 2010
Location: Moorsoldaten barracks
Posts: 2,183 (1.89/day)
Thanks: 709
Thanked 312 Times in 250 Posts

System Specs

I run ShieldsUp! every once in a while since many years. Still trust it.

BTW, "REJECTED" is slightly less secure then "NOT RESPONDED"
__________________

"Where's Carmack when you need him?" by cadaveca
erixx is offline  
Reply With Quote
Old Feb 11, 2013, 02:16 PM   #23
remixedcat
1000 Posts
 
remixedcat's Avatar
 
Join Date: May 2010
Posts: 1,179 (1.07/day)
Thanks: 754
Thanked 248 Times in 190 Posts

System Specs

Quote:
Originally Posted by erixx View Post
I run ShieldsUp! every once in a while since many years. Still trust it.

BTW, "REJECTED" is slightly less secure then "NOT RESPONDED"
Yups and that's what I was sayin earlier...
__________________
System:Intel i5 3570K @ 3.4Ghz//ASRock Z77 Pro3//Coolemaster Hyper 212 Evo//16GB Corsair XMS3//EVGA Nvidia GTX 650Ti SSC 1GB//128GB Samsung 840 SSD/1.5TB Seagate HDD//Antec Three Hundred Two//620w Antec High Current Gamer HCG-620M//Windows Server 2012 x64 Standard
Misc:Samsung SyncMaster P2350 23in@1920x1080+LG Flatron 19in 1440x900//IoSafe Fireproof ext 500GB HDD//Amped Wireless R20000G high power router//APC BackUPS XS1000 UPS
Websites: AGNXNetworks//RemixedCat's Place Of Meow Blog
remixedcat is offline  
Reply With Quote
Old Feb 11, 2013, 02:39 PM   #24
johnspack
3500 Posts
 
Join Date: Oct 2007
Location: Nelson B.C. Canada
Posts: 3,724 (1.81/day)
Thanks: 282
Thanked 750 Times in 516 Posts

System Specs

Asus RT-N16 running EasyTomato, no response.
__________________
Heatware: http://www.heatware.com/eval.php?id=73875
Clan !! The Fighting 24th !!
http://fxxiv.forumotion.ca/
Buy the games you like! Boycott the garbage!
Cruncher: P6T Xeon ES W3570 6Gbs Ram
1xgtx285 1xgtx260
johnspack is offline  
10 Million points folded for TPU
Reply With Quote
Old Feb 11, 2013, 02:55 PM   #25
syeef
Banned
 
Join Date: Jul 2008
Location: Dhaka, Bangladesh
Posts: 280 (0.16/day)
Thanks: 151
Thanked 70 Times in 54 Posts

System Specs

Quote:
Originally Posted by erixx View Post
BTW, "REJECTED" is slightly less secure then "NOT RESPONDED"
Quote:
Originally Posted by remixedcat View Post
Yups and that's what I was sayin earlier...
Hmm... Sad.

And it seems I won't be able to turn off UPnP after all... having trouble playing Multiplayer without it .

And am I the only one here with this Security Issue? LOL.
syeef is offline  
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Microsoft Fixes Critical RDP Security Hole, Asks Users to Patch or Risk Attacks btarunr News 13 Mar 14, 2012 09:51 PM
Security risk: Spam e-mail from "puremobile.com" confirming order! Virus through pdf? scaminatrix Networking & Security 6 Apr 15, 2011 04:51 PM
Looking for home security system runevirage General Hardware 14 Jul 8, 2010 09:04 PM
Is Security Software Becoming a Security Risk? Polaris573 News 4 Nov 26, 2007 06:17 PM
Computer routers face hijack risk: NamesDontMatter News 31 Feb 24, 2007 06:02 PM


All times are GMT. The time now is 07:08 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
no new posts