Hackers can bypass authentication on GPON home routers by affixing an image suffix to the URL. Attackers can also use the vulnerability to see the IP address of specific routers, matching them to physical addresses in some cases. They can also see what the user is doing on the web, including browsing history. A patch is now available for this issue; users should contact their ISPs about updates, vpnMentor said. The company said: It is critical that users know about the patch and can use it to fix their routers””,May 1
Source: https://threatpost.com/millions-of-home-fiber-routers-vulnerable-to-complete-takeover/131593/