The following security advisory can be found at the SecuriTeam web site: http://www.securiteam.com

- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html


SUMMARY

The purpose of this paper is to outline the security measures being taken by vendors to prevent such attacks in their home routing products, what those security measures accomplish, and where they fall short.

We will use existing network tools to examine common vulnerabilities in a range of popular devices and demonstrate weaknesses in the security of those devices; additionally, we will examine common trends in security measures that have been duplicated across vendors, and examine how those trends help and hinder the security of their devices. In particular, we will examine the following home routers, which are some of the latest offerings from their respective vendors at the time of this writing:

* Linksys WRT160N
* D-Link DIR-615
* Belkin F5D8233-4v3
* ActionTec MI424-WR

DETAILS

Read the papers listed at the bottom of this message.

CONCLUSION

Router manufacturers are increasing the security of their devices, however, home router security still has a long road ahead of it. In the documents listed below you will find a table listing each of the devices and their associated, reasonably exploitable, vulnerabilities mentioned in this paper; these types of
vulnerabilities must be considered by all vendors, and should be investigated by any consumer before purchasing a router.


ADDITIONAL INFORMATION

The information has been provided by dev@sourcesec.com> SourceSec DevTeam.

The original article can be found at:

http://www.sourcesec.com/Lab/soho_router_report.pdf