Security expert Michael Messner has posted details of vulnerabilities in a number of different routers on his blog. Routers from Linksys, Netgear and repeat offender D-Link are affected. Some of the vulnerabilities can be exploited to inject commands remotely using the URL parameter ping_size. An attacker could lure his victim to a crafted web site pointing to the router interface on the local network (cross site request forgery, CSRF) Messner contacted Netgear just a day to declare the case closed without having fixed the vulnerability.”]