Backdoor in Multiple DSL Routers – Daily Security Byte EP.132

A few months ago, researchers found a backdoor in an LTE consumer router. Today, we learned that his hole exists in a number of DSL routers, including ones given to customers by ISPs. Watch the video to learn about this secret admin account, and what you can do to mitigate access to it.

(Episode Runtime: 2:25)

Direct YouTube Link: https://www.youtube.com/watch?v=7RCigiLt8gI

EPISODE REFERENCES:

• US-CERT advisory on consumer router backdoor – CERT.org
• Original vulnerability advisory for LTE router – CERT.org
• Article describing the hardcoded password in a bunch of DSL routers – The Register

— Corey Nachreiner, CISSP (@SecAdept)