<p dir="ltr">How on earth does that kind of mistake still happen?</p>
<p dir="ltr">I also notice that 50% of public Wi-Fi routers have the default password unchanged, though. Or are set to the network name...</p>
<div class="gmail_quote">On 7 Mar 2014 12:34, "Andreas Tauscher" <<a href="mailto:ta@geuka.net">ta@geuka.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
If you own this upgrade the firmware ASAP.<br>
<br>
Usernames and passwords are found within the HTML source code of the<br>
login screen.<br>
<br>
CVE:<br>
<a href="http://www.securityfocus.com/archive/1/531356" target="_blank">http://www.securityfocus.com/archive/1/531356</a><br>
<br>
Cisco Anouncemnet:<br>
<a href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd" target="_blank">http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd</a><br>
<br>
Demonstarion of the exploit:<br>
<a href="https://docs.google.com/file/d/0BzDR2c9r47AiMVlQWkVNVjE0REU/edit?pli=1" target="_blank">https://docs.google.com/file/d/0BzDR2c9r47AiMVlQWkVNVjE0REU/edit?pli=1</a><br>
<br>
Andreas<br>
_______________________________________________<br>
The Arusha Linux User Group: <a href="http://unix.or.tz" target="_blank">http://unix.or.tz</a><br>
Linux mailing list<br>
<a href="mailto:Linux@lists.habari.co.tz">Linux@lists.habari.co.tz</a><br>
<a href="http://lists.habari.co.tz/cgi-bin/mailman/listinfo/linux" target="_blank">http://lists.habari.co.tz/cgi-bin/mailman/listinfo/linux</a><br>
<br>
The Arusha LUG mailing list is generously hosted by Habari Node Ltd: <a href="http://www.habari.co.tz/" target="_blank">http://www.habari.co.tz/</a><br>
<br>
The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.<br>
</blockquote></div>