Security risk found for home routers

Jetster · Feb 11, 2013

Evidently they have found a security risk in over a million routers with UPnP. It effects many brands

http://www.csoonline.com/article/727829/device-makers-blamed-for-consumer-risk-from-upnp-flaws

Here is a test for it

https://www.grc.com/shieldsup

My router Netgear WNDR4300

remixedcat · Feb 11, 2013

Heard of this and my Amped Wireless R20000G and R10000 are not on any of the 3 lists!

http://remixedcat.blogspot.com/2013/02/huge-upnp-vulnerability-in-lots-of.html

I have a link to the lists as well....

I did both tests with UPnP on and I passed and go the "not responding" message instead of rejected message which the not responding message is the best one.

But both those routers ship with UPNP disabled.

Nordic · Feb 11, 2013

Was turned on by default. Now off. Nothing I used anyways. Thanks for the tip. Router is a netgear 3700.

HammerON · Feb 11, 2013

Shields up Captain:
"THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

(That's good news!)"

1nf3rn0x · Feb 11, 2013

AsRock · Feb 11, 2013

Same here all blocked.

droopyRO · Feb 11, 2013

Safe here also ... but why is the FBI knocking on my door ?

remixedcat · Feb 11, 2013

also guys please specify what router you have here too... that would help others.

AsRock · Feb 11, 2013

remixedcat said:
also guys please specify what router you have here too... that would help others.

WRT54G running Tomato

syeef · Feb 11, 2013

Already read about this on NextPowerUp! on Feb 3rd.
http://www.nextpowerup.com/news/692/upnp-flaws-expose-up-to-50-million-of-networking-devices.html

1nf3rn0x said:
http://img.techpowerup.org/130211/Untitled.png
Safe

Not Safe... Your IP is 58.168.116.239

syeef · Feb 11, 2013

Looks like I am NOT Safe as well :nutkick:

.

I am using a AWB RG300 4G WiMAX Modem/Router that was supplied by my ISP.

_JP_ · Feb 11, 2013

Router Model: Conceptronic C54BRS4A v1.0 (Grey box)
Firmware Version: 2.02

UPnP ON
Results:

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!
(That's good news!)

UPnP OFF
Results:

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!
(That's good news!)

Crap Daddy · Feb 11, 2013

Everything's fine over here. I have D-link DIR 600 if that helps others.

FordGT90Concept · Feb 11, 2013

Netopia 3341 ADSL Gateway (PPPoE)
D-Link DGL-4500 Router
Did not respond to UPnP probes.

syeef said:
I am using a AWB RG300 4G WiMAX Modem/Router that was supplied by my ISP.

There's your problem.

TheMailMan78 · Feb 11, 2013

I have one router plugged into the web and another router plugged into that. If the primary router is safe so is the second one correct?

FordGT90Concept · Feb 11, 2013

Only if you are positive that the first router is not responding. If the first is passing it through to the second and the second is not responding, the first may still be vulnerable.

brandonwh64 · Feb 11, 2013

TheMailMan78 said:
I have one router plugged into the web and another router plugged into that. If the primary router is safe so is the second one correct?

So you have two routers on the same network and why?

TheMailMan78 · Feb 11, 2013

FordGT90Concept said:
Only if you are positive that the first router is not responding. If the first is passing it through to the second and the second is not responding, the first may still be vulnerable.

No the one I tested is the primary one. It didn't respond. The other one gets its internet connection from the primary one. No worries then. Thanks.

brandonwh64 said:
So you have two routers on the same network and why?

Because one I have to use because I get my phone through it. However its not really the best wireless. So I have another router hooked up to it for wireless. Tablets and smart phones just don't like the primary router.

syeef · Feb 11, 2013

FordGT90Concept said:
syeef said:

I am using a AWB RG300 4G WiMAX Modem/Router that was supplied by my ISP.

Click to expand...

There's your problem.

My ISP only sells that Modem/Router and provides no option for 3rd-party :banghead:

Modem/Router.

With UPnP OFF I get:

THE EQUIPMENT AT THE TARGET IP ADDRESS
ACTIVELY REJECTED OUR UPnP PROBES!

(That's good news!)

remixedcat · Feb 11, 2013

wow with UPNP off you should get the "not responding" instead of rejection... that's wierd...

I get the "not responding" message with UPNP on on my Amped.

Phusius · Feb 11, 2013

I have ATT Uverse router, says im all safe on my end.

erixx · Feb 11, 2013

I run ShieldsUp! every once in a while since many years. Still trust it.

BTW, "REJECTED" is slightly less secure then "NOT RESPONDED"

remixedcat · Feb 11, 2013

erixx said:
I run ShieldsUp! every once in a while since many years. Still trust it.

BTW, "REJECTED" is slightly less secure then "NOT RESPONDED"

Yups and that's what I was sayin earlier...

johnspack · Feb 11, 2013

Asus RT-N16 running EasyTomato, no response.

syeef · Feb 11, 2013

erixx said:
BTW, "REJECTED" is slightly less secure then "NOT RESPONDED"

remixedcat said:
Yups and that's what I was sayin earlier...

Hmm... Sad.

And it seems I won't be able to turn off UPnP after all... having trouble playing Multiplayer without it

.

And am I the only one here with this Security Issue? LOL.

System Name	Juliette // HTPC
Processor	Intel i7 9700K // AMD Ryzen 5 5600G
Motherboard	ASUS Prime Z390X-A // ASRock B550 ITX-AC
Cooling	Noctua NH-U12 Black // Stock
Memory	Corsair DDR4 3600 32gb //G.SKILL Trident Z Royal Series 16GB (2 x 8GB) 3600
Video Card(s)	ASUS RTX4070 OC// GTX 1650
Storage	Samsung 970 EVO NVMe 1Tb, Intel 665p Series M.2 2280 1TB // Samsung 1Tb SSD
Display(s)	ASUS VP348QGL 34" Quad HD 3440 x 1440 // 55" LG 4K SK8000 Series
Case	Seasonic SYNCRO Q7// Silverstone Granada GD05
Audio Device(s)	Focusrite Scarlett 4i4 // HDMI to Samsung HW-R650 sound bar
Power Supply	Seasonic SYNCRO 750 W // CORSAIR Vengeance 650M
Mouse	Cooler Master MM710 53G
Keyboard	Logitech 920-009300 G512 SE
Software	Windows 10 Pro // Windows 10 Pro

System Name	RemixedBeast-NX
Processor	Intel Xeon E5-2690 @ 2.9Ghz (8C/16T)
Motherboard	Dell Inc. 08HPGT (CPU 1)
Cooling	Dell Standard
Memory	24GB ECC
Video Card(s)	Gigabyte Nvidia RTX2060 6GB
Storage	2TB Samsung 860 EVO SSD//2TB WD Black HDD
Display(s)	Samsung SyncMaster P2350 23in @ 1920x1080 + Dell E2013H 20 in @1600x900
Case	Dell Precision T3600 Chassis
Audio Device(s)	Beyerdynamic DT770 Pro 80 // Fiio E7 Amp/DAC
Power Supply	630w Dell T3600 PSU
Mouse	Logitech G700s/G502
Keyboard	Logitech K740
Software	Linux Mint 20
Benchmark Scores	Network: APs: Cisco Meraki MR32, Ubiquiti Unifi AP-AC-LR and Lite Router/Sw:Meraki MX64 MS220-8P

Processor	7800x3d
Motherboard	Gigabyte B650 Auros Elite AX
Cooling	Custom Water
Memory	GSKILL 2x16gb 6000mhz Cas 30 with custom timings
Video Card(s)	MSI RX 6750 XT MECH 2X 12G OC
Storage	Adata SX8200 1tb with Windows, Samsung 990 Pro 2tb with games
Display(s)	HP Omen 27q QHD 165hz
Case	ThermalTake P3
Power Supply	SuperFlower Leadex Titanium
Software	Windows 11 64 Bit
Benchmark Scores	CB23: 1811 / 19424 CB24: 1136 / 7687

System Name	Threadripper
Processor	3960X
Motherboard	ASUS ROG Strix TRX40-XE
Cooling	XSPC Raystorm Neo (sTR4) Water Block
Memory	G. Skill Trident Z Neo 64 GB 3600
Video Card(s)	PNY RTX 4090
Storage	Samsung 960 Pro 512 GB + WD Black SN850 1TB
Display(s)	Dell 32" Curved Gaming Monitor (S3220DGF)
Case	Corsair 5000D Airflow
Audio Device(s)	On-board
Power Supply	EVGA SuperNOVA 1000 G5
Mouse	Roccat Kone Pure
Keyboard	Corsair K70
Software	Win 10 Pro
Benchmark Scores	Always changing~

System Name	Omen
Processor	i7-4710HQ
Cooling	Dual fan/heatpipe
Memory	16GB
Video Card(s)	4GB GTX 860M
Storage	256GB PCIE SSD/256GB PNY UHS-1 SD Card
Display(s)	15.6' 1080P
Case	Aluminium
Audio Device(s)	Onboard
Power Supply	Brick
Software	Win 10

Security risk found for home routers

Jetster

remixedcat

Nordic

HammerON

The Watchful Moderator

1nf3rn0x

AsRock

TPU addict

droopyRO

remixedcat

AsRock

TPU addict

syeef

syeef

_JP_

Crap Daddy

FordGT90Concept

"I go fast!1!11!1!"

TheMailMan78

Big Member

FordGT90Concept

"I go fast!1!11!1!"

brandonwh64

Addicted to Bacon and StarCrunches!!!

TheMailMan78

Big Member

syeef

remixedcat

Phusius

New Member

erixx

remixedcat

johnspack

Here For Good!

syeef

Processor	AMD 3900X \ AMD 7700X
Motherboard	ASRock AM4 X570 Pro 4 \ ASUS X670Xe TUF
Cooling	D15
Memory	Patriot 2x16GB PVS432G320C6K \ G.Skill Flare X5 F5-6000J3238F 2x16GB
Video Card(s)	eVga GTX1060 SSC \ XFX RX 6950XT RX-695XATBD9
Storage	Sammy 860, MX500, Sabrent Rocket 4 Sammy Evo 980 \ 1xSabrent Rocket 4+, Sammy 2x990 Pro
Display(s)	Samsung 1080P \ LG 43UN700
Case	Fractal Design Pop Air 2x140mm fans from Torrent \ Fractal Design Torrent 2 SilverStone FHP141x2
Audio Device(s)	Yamaha RX-V677 \ Yamaha CX-830+Yamaha MX-630 Infinity RS4000\Paradigm P Studio 20, Blue Yeti
Power Supply	Seasonic Prime TX-750 \ Corsair RM1000X Shift
Mouse	Steelseries Sensei wireless \ Steelseries Sensei wireless
Keyboard	Logitech K120 \ Wooting Two HE
Benchmark Scores	Meh benchmarks.

System Name	WorkStation
Processor	Intel i7 3770k @ 4.4GHz
Motherboard	ASRock Z77 Extreme6
Cooling	Corsair H110 Water Cooler AIO
Memory	Corsair Vengeance 8GB DDR3 1600MHz
Video Card(s)	MSI GTX680 Twin Frozr III OC
Storage	WD 1TB Sata III
Display(s)	Samsung 22-inch LED 1080p
Case	Corsair Carbide Air 540
Audio Device(s)	Onboard Realtek 898 HD
Power Supply	Corsair CS750M Gold
Software	Windows 8.1 Pro x64

System Name	LenovoⓇ ThinkPad™ T430
Processor	IntelⓇ Core™ i5-3210M processor (2 cores, 2.50GHz, 3MB cache), Intel Turbo Boost™ 2.0 (3.10GHz), HT™
Motherboard	Lenovo 2344 (Mobile Intel QM77 Express Chipset)
Cooling	Single-pipe heatsink + Delta fan
Memory	2x 8GB KingstonⓇ HyperX™ Impact 2133MHz DDR3L SO-DIMM
Video Card(s)	Intel HD Graphics™ 4000 (GPU clk: 1100MHz, vRAM clk: 1066MHz)
Storage	SamsungⓇ 860 EVO mSATA (250GB) + 850 EVO (500GB) SATA
Display(s)	14.0" (355mm) HD (1366x768) color, anti-glare, LED backlight, 200 nits, 16:9 aspect ratio, 300:1 co
Case	ThinkPad Roll Cage (one-piece magnesium frame)
Audio Device(s)	HD Audio, RealtekⓇ ALC3202 codec, DolbyⓇ Advanced Audio™ v2 / stereo speakers, 1W x 2
Power Supply	ThinkPad 65W AC Adapter + ThinkPad Battery 70++ (9-cell)
Mouse	TrackPointⓇ pointing device + UltraNav™, wide touchpad below keyboard + ThinkLight™
Keyboard	6-row, 84-key, ThinkVantage button, spill-resistant, multimedia Fn keys, LED backlight (PT Layout)
Software	MicrosoftⓇ WindowsⓇ 10 x86-64 (22H2)

System Name	Old Fart / Young Dude
Processor	2500K / 6600K
Motherboard	ASRock P67Extreme4 / Gigabyte GA-Z170-HD3 DDR3
Cooling	CM Hyper TX3 / CM Hyper 212 EVO
Memory	16 GB Kingston HyperX / 16 GB G.Skill Ripjaws X
Video Card(s)	Gigabyte GTX 1050 Ti / INNO3D RTX 2060
Storage	SSD, some WD and lots of Samsungs
Display(s)	BenQ GW2470 / LG UHD 43" TV
Case	Cooler Master CM690 II Advanced / Thermaltake Core v31
Audio Device(s)	Asus Xonar D1/Denon PMA500AE/Wharfedale D 10.1/ FiiO D03K/ JBL LSR 305
Power Supply	Corsair TX650 / Corsair TX650M
Mouse	Steelseries Rival 100 / Rival 110
Keyboard	Sidewinder/ Steelseries Apex 150
Software	Windows 10 / Windows 10 Pro

System Name	BY-2021
Processor	AMD Ryzen 7 5800X (65w eco profile)
Motherboard	MSI B550 Gaming Plus
Cooling	Scythe Mugen (rev 5)
Memory	2 x Kingston HyperX DDR4-3200 32 GiB
Video Card(s)	AMD Radeon RX 7900 XT
Storage	Samsung 980 Pro, Seagate Exos X20 TB 7200 RPM
Display(s)	Nixeus NX-EDG274K (3840x2160@144 DP) + Samsung SyncMaster 906BW (1440x900@60 HDMI-DVI)
Case	Coolermaster HAF 932 w/ USB 3.0 5.25" bay + USB 3.2 (A+C) 3.5" bay
Audio Device(s)	Realtek ALC1150, Micca OriGen+
Power Supply	Enermax Platimax 850w
Mouse	Nixeus REVEL-X
Keyboard	Tesoro Excalibur
Software	Windows 10 Home 64-bit
Benchmark Scores	Faster than the tortoise; slower than the hare.

System Name	TheMailbox 5.0 / The Mailbox 4.5
Processor	RYZEN 1700X / Intel i7 2600k @ 4.2GHz
Motherboard	Fatal1ty X370 Gaming K4 / Gigabyte Z77X-UP5 TH Intel LGA 1155
Cooling	MasterLiquid PRO 280 / Scythe Katana 4
Memory	ADATA RGB 16GB DDR4 2666 16-16-16-39 / G.SKILL Sniper Series 16GB DDR3 1866: 9-9-9-24
Video Card(s)	MSI 1080 "Duke" with 8Gb of RAM. Boost Clock 1847 MHz / ASUS 780ti
Storage	256Gb M4 SSD / 128Gb Agelity 4 SSD , 500Gb WD (7200)
Display(s)	LG 29" Class 21:9 UltraWide® IPS LED Monitor 2560 x 1080 / Dell 27"
Case	Cooler Master MASTERBOX 5t / Cooler Master 922 HAF
Audio Device(s)	Realtek ALC1220 Audio Codec / SupremeFX X-Fi with Bose Companion 2 speakers.
Power Supply	Seasonic FOCUS Plus Series SSR-750PX 750W Platinum / SeaSonic X Series X650 Gold
Mouse	SteelSeries Sensei (RAW) / Logitech G5
Keyboard	Razer BlackWidow / Logitech (Unknown)
Software	Windows 10 Pro (64-bit)
Benchmark Scores	Benching is for bitches.

Processor	i5-2500k @ 4.5
Motherboard	Asus Z68 Deluxe
Cooling	Noctua NH-D14
Memory	16GB DDR3 1600
Video Card(s)	Sapphire 7950 @ 1200/1475 @ 1175v
Display(s)	Dell 23" 2ms
Case	Carbide 500r
Audio Device(s)	Asus Xonar DG

System Name	System2 Blacknet , System1 Blacknet2
Processor	System2 Threadripper 1920x, System1 2699 v3
Motherboard	System2 Asrock Fatality x399 Professional Gaming, System1 Asus X99-A
Cooling	System2 Noctua NH-U14 TR4-SP3 Dual 140mm fans, System1 AIO
Memory	System2 64GBS DDR4 3000, System1 32gbs DDR4 2400
Video Card(s)	System2 GTX 980Ti System1 GTX 970
Storage	System2 4x SSDs + NVme= 2.250TB 2xStorage Drives=8TB System1 3x SSDs=2TB
Display(s)	2x 24" 1080 displays
Case	System2 Some Nzxt case with soundproofing...
Audio Device(s)	Asus Xonar U7 MKII
Power Supply	System2 EVGA 750 Watt, System1 XFX XTR 750 Watt
Mouse	Logitech G900 Chaos Spectrum
Keyboard	Ducky
Software	Manjaro, Windows 10, Kubuntu 23.10
Benchmark Scores	It's linux baby!