Possible Vulnerability in "Wireless Bluebox" (Linksys WRT54G) Found

Submitted by Warren on Wed, 06/02/2004 - 11:20pm.

So, I'm a big believer in hardware firewalls (as
opposed to software firewalls like ZoneAlarm), and I'm likely to have a
client install a LinkSys Firewall/Router even if they only have one
computer hooked up the the Internet via a broadband connection. I
myself
have used the wired LinkSys routers for many years, and have
even used one to wire up a 100-computer online gaming convention (think
huge LAN-Party) to a T1 in a hotel ballroom. To keep from constantly
calling them "LinkSys Firewall/Routers," I usually refer to them
as Blue Boxes, because they are blue and boxy, and my clients seem to
be able to relate to the term
.

Anyway, these days these routers can be purchased with an 802.11b (or
g) wireless access point built-in for just $40 more than a wired-only
version, so even if a client doesn't yet have a need for wireless, I
normally recommend getting it anyway
. Then I turn off the wireless
radio part. I also change the password from the stunningly-stupid
default of "admin," and disable "remote configuration" option, meaning
that you must be inside the LAN in order to reconfigure the Blue Box.

Well,
it turns out that disabling the remote configuration option may not
actually disable it
. At least some of the time. The unit in question is
the LinkSys WRT54G, and apparently, from outside the LAN (that is, from
the Internet) you can point your browser to the Blue Box's IP address
at either port 80 or 443, and you'll get a password prompt. If the
owner hasn't changed the default password from "admin," then full
access to the Blue Box's configuration is readily available
. Yikes!!

With
such access, a hacker could change the password to something the owner
won't know, change the firmware, or learn what wireless devices can use
it
(that is, read the MAC address table and WEP encryption key), or
hack into your LAN. There are full descriptions of the problem in some
of the media outlets
, and the original warning posted to a mailing list
is also available.

What to do if you own such a Blue Box? First,
change the administration password. Next, check the wireless settings
to verify that no one has added themselves to your LAN. Finally, if you
can, update your Blue Box's firmware. Also, read the articles I just linked to in order to learn other protective measures. If you are a client of mine (or
want to be
) contact me (warren at warrenernst dot com) and I'll check out your setup.

Interesting post and I

#9035 On Fri, 01/01/2010 10:56am Anonymous said,

Interesting post and I really like your take on the issue. I now have a clear idea on what this matter is all about. Thank you so much.
dog pendant

I am always searching online

#9194 On Fri, 03/05/2010 5:41pm Anonymous said,

I am always searching online for articles that can help me. Thank you
Powerpoint Converter

I don't.......

#8995 On Wed, 11/25/2009 7:02pm Anonymous said,

So i dont remember if i set my username and password but i cant log in because i dont know the info,and i dont want to reset my router what can i do?

güncel haber Please visit

#8988 On Sun, 11/15/2009 1:09pm Anonymous said,

güncel haber

Please visit this site :)

Great post mate! I will

#8981 On Fri, 11/13/2009 10:17am Anonymous said,

Great post mate! I will refer your blog to my colleagues at 1800petmeds for reference.

yeah

#8929 On Sun, 10/04/2009 10:27am Anonymous said,

i forgot the password to the admin account on my WRT45GS and i cant log into the settings. i tried using the reset button, unplugging and plugging it in again, and even putting a big magnet up to it and i cant reset it to the factory default. i cant install the setup because it says it cant connect to the router. can you help me?

auto insurance

I was actually bitten by

#8888 On Wed, 09/16/2009 3:43am Anonymous said,

I was actually bitten by this one, somebody did change my admin pw, because I didn't know about the bug in disabling Remote Admin. I held down the reset button for approx 10 seconds and everything was cleared to defaults.

tül perde

Wow. This is a very useful

#8850 On Fri, 08/21/2009 12:19pm Anonymous said,

Wow. This is a very useful and informative article. You definitely not only know your stuff, you know how to illustrate your point well. Great work.

nice post and i have bookmarked this page.
regardssohbet chat

Blue-boxes and 10 things to do with old PC's

#361 On Tue, 08/30/2005 12:43pm Anonymous said,

As a PC-mag reader since 1981, things catch my eye here and there. I was amazed (to use vernacular) to see that old PC's in your opinion could not be used as industrial strength firewalls. The 6 PC's in my home have been protected by the free SmoothWall for about 4 years now using a Pentium 166mx with 32 megs of ram... I upgraded to 48meg ram a year ago so that I could install a proxy filtering add-on from www.urlfilter.net with the 500,000 site black-list from the Oregon school board at http://squidguard.mesd.k12.or.us
It's worth noting that there are dozens of other Firewall appliances listed here http://www.frozentech.com/content/livecd.php and in my humble opinion, much more can be done with those lowly Pentiums.
- I have installed SmoothWalls now in dozens of companies - Cliff

Cliff, Warren here. Needle

#363 On Thu, 09/01/2005 3:10pm Warren said,

Cliff,

Warren here. Needless to say, *I do* think an old PC can be used as a firewall just fine. In fact, I used a P133 for *years* for this purpose.

That said, I have a hard time justifying it for the average user or PCMag reader. Off-the-shelf broadband routers/firewalls are less than $40, use far less electricity than a PC, have no moving parts (hard drives, fans) to wear out or make noise, and are much less likely to be hacked by a bored script kiddie with nothing better to do than spend hours and hours looking for a way in.

As for the non-average PCMag user such as yourself (and me, for that matter), obviously, you should go for it and have fun, but be aware that you're then turning firewalling into a hobby, which is not necessarily a bad thing, but that's what you're turning it into.

Anyway, thanks for the comment.

i forgot my admin password

#66 On Sat, 03/26/2005 9:11pm Anonymous said,

i forgot the password to the admin account on my WRT45GS and i cant log into the settings. i tried using the reset button, unplugging and plugging it in again, and even putting a big magnet up to it and i cant reset it to the factory default. i cant install the setup because it says it cant connect to the router. can you help me?

The correct word is "who".

#9132 On Mon, 02/22/2010 11:00pm Anonymous said,

The correct word is "who". Also Linksys is singular
life insurance quotes so it should be apostrophe S. "It is not Linksys's fault that half the people who buy their products are morons."

Hold the reset button down...

#71 On Thu, 03/31/2005 3:09pm Warren said,

Warren here. In my experience, you'll need to hold the reset button down for around 10 to 20 seconds in order to do a factory reset. And in addition to this, I've had to repeat the process a few times in order to get a totally clean reset. Once you've done a reset, then password should revert to the default "admin". Of course, you'll need to reset all of your firewall and wireless settings.

Warren is correct

#122 On Sun, 06/19/2005 10:22am Anonymous said,

I was actually bitten by this one, somebody did change my admin pw, because I didn't know about the bug in disabling Remote Admin. I held down the reset button for approx 10 seconds and everything was cleared to defaults.

Beats me why Linksys can't randomise passwords when they ship and sticker the box or manual with the individual password. Yes, it would cost more, but so what?

The shoddy way they handled security on this product with a string of cascading bugs is appalling:
1) stupid default login (the only good default pw is a random one)
2) bug prevents disabling remote admin (!!!!) holy QA, batman
3) web interface is http cleartext INCLUDING WEP keys
and I'm sure that's only some of the obvious flaws.

Apart from that it's a good product, although the DHCP server has a very bad and inconvenient habit of changing IP addresses over time for the same machine/MAC. That doesn't seem like sensible behaviour to me.

Read the instructions.... It

#123 On Mon, 06/27/2005 11:08am Anonymous said,

Read the instructions.... It advises you to change the admin password. It is not Linksys' fault that half the people they buy their products are morons.

Who's the moron?

#131 On Sun, 07/10/2005 1:54am Anonymous said,

I think you meant: THAT buy their products...

WHO's the moron

#358 On Thu, 08/25/2005 8:40am Anonymous said,

The correct word is "who". Also Linksys is singular so it should be apostrophe S. "It is not Linksys's fault that half the people who buy their products are morons."

YOU be da moron

#706 On Thu, 12/29/2005 9:43am Anonymous said,

You don't put an "'s" after a word that ends in "s".

." or ".

#360 On Thu, 08/25/2005 8:42am Anonymous said,

It is possible that the last part of my correction should have read: ".

It is possible that the last

#359 On Thu, 08/25/2005 8:41am Anonymous said,

It is possible that the last part of my correction should have read: ".

Grammar for morons

#720 On Sun, 02/05/2006 12:36am Anonymous said,

Actually, the only time s apostrophe is used is when the s denotes a pluralization. In this case, Linksys ends in 's' but the 's' is not pluralizing the noun. Thus, the proper way to give this noun possession would be "Linksys's" (also, punctuation goes INSIDE quotes. ie. I said, "you guys need an English class." Also, punctuation such as a period or comma goes OUTSIDE parenthesis.). <-- This second period is ending the sentence that started outside the parenthesis while the first period ends the sentence inside the parenthesis.

Morones

#6055 On Sat, 07/22/2006 9:41am Anonymous said,

Oigan morones,
si hablaran en español y no estarìan discutiendo estas estupideces.

(translation:
Hey morons,
if you talked spanish, you wouldnt be discussing this shit.)

dude u rule

#8332 On Mon, 02/04/2008 10:55am Anonymous said,

Rofl

Looks like the teacher needs to be schooled

#2074 On Wed, 05/17/2006 9:36pm Anonymous said,

If you look up the grammar rules pertaining to the apostrophe-s examples, you'd find that it has absolutely nothing to do with pluralization. The apostrophe denotes possession. AND, whether you use s's or s', is entirely up to the person writing it.

grammar is best important

#8890 On Wed, 09/16/2009 3:48am Anonymous said,

ı think grammar is very important
kızlar

Sigh

#1986 On Wed, 05/17/2006 6:54am Anonymous said,

Why is it that, when one's superiority complex ramps up, and the presumed need to correct english online (a challenge that is time consuming and not worthwhile), people suddenly feel the need to use the word "thus?" It's as cliche as a villain revealing his secret plans to the hero, moments before leaving the room (and THUS the hero escapes and thwarts the villains plans...)

Agreed...

#6082 On Wed, 11/08/2006 6:42am Anonymous said,

Arguing on the internet is like participating in the Special Olympics...even if you win you're still retarded.

Steven Khieu

#451 On Wed, 09/21/2005 10:08pm Anonymous said,

Errr.. the DHCP can be disable, and use your comps to assign DHCP.
and there's a quick fix for your remote management. er.. block the ports. ??!!!

but if you really want to do the whole nine yards. then download the cisco 3.1.1 firmware and use that.

given you know your CCNA.

given you know your CCNA?

#6128 On Wed, 11/22/2006 7:44pm Anonymous said,

given you know your cisco certified network associate. how does this sentence make sense? how does the CCNA have anything to do with replacing router firmware if its not in the curriculum? how do people argue on this site about the use of s's and the word thus? how come i cant stop asking these questions, and THUS, am wasting my time?

Well, Let's see.using Cisco

#8322 On Mon, 01/14/2008 6:38pm Anonymous said,

Well, Let's see.
using Cisco Firmware and not knowing the commands and educational knowledge to command a Cisco hardware would not ony be idiotic but... how can I say this. dumass.

:)