Blog | G5 Cyber Security

The SoHo router backdoor that was fixed by hiding it behind another backdoor

French hacker Eloi Vanderbeken hacked into his Netgear router over the Christmas break. He found a service listening on port 32764 that could be instructed to dump the routers configution and admin username and password. A patch closed the listening port and with it the backdoor was reactivated by default. It means you can re-renable it by sending the router a so-called magic ethernet packet which acts as a signal, rather than carrying data, telling a network card to power up.”]

Source: https://nakedsecurity.sophos.com/2014/04/23/the-soho-router-backdoor-that-was-fixed-by-hiding-it-behind-another-backdoor/

Exit mobile version