Security flaws in Linksys routers have been discovered by researchers, who found that vulnerable Wi-Fi routers could be exploited and turned into botnets.
Researcher Tao Sauvage from cyber security firm IOActive Group and independent researcher Antide Petit, uncovered ten separate vulnerabilities in more than 20 Linksys Smart Wi-Fi routers, and identified some 7,000 devices susceptible to exploitation.
“A number of the security flaws we found are associated with authentication, data sanitisation, privilege escalation, and information disclosure,” said Sauvage.
“Additionally, 11 percent of the active devices exposed were using default credentials, making them particularly susceptible to an attacker easily authenticating and potentially turning the routers into bots, similar to what happened in last year’s Mirai Denial of Service (DoS) attacks.”
IOActive informed Linksys of the vulnerabilities in January, and both companies have been working together to plug the security holes.
Currently, Linksys and IOActive have come up with a workaround to avoid the risks posed by the vulnerabilities, until Linksys pushes out a firmware patch in the coming weeks.
Linksys’s advisory advises users to enable automatic updates on their router, disable the Wi-Fi guest network if it’s not being used, and naturally change the default administrators password.
With the potential to turn Wi-Fi routers into botnets and wreak havoc in a similar vein to the Mirai botnet, such flaws are deeply problematic, particularity when the distribution of routers from established brands is worldwide.
Are you a security pro? Try our quiz!
German foreign minister warns Russia will face consequences for “absolutely intolerable” cyberattack on ruling party,…
Google is reportedly laying off at least 200 staff from its “Core” organisation, including key…
Investor appeasement? Apple unveils huge $110 billion share buyback program, as sales of iPhone decline…
Tesla retreats from pioneering gigacasting manufacturing process, amid cost cutting and challenges at EV giant
No skynet please. After the US, UK and France pledge human only control of nuclear…
Microsoft's AI investments continue in south east Asia, after investments in Japan, Malaysia, Indonesia, as…