Hack? RT-AC3200

[MartinFau]

Is it possible the RT-AC3200 can be hacked by an outsider ?
Just purchased the RT-AC3200 this weekend. I noticed this evening on the router web interface, Network Map, Client View List, that two unknown clients were connected. The interface icon associated to these two connection was the *wired* icon, which was physically impossible as only a WD My Cloud is Ethernet connected to the router.
Very worried if this router can be accessed by unauthorized outsiders.
Any one noticed such issue ?

 

[L&LD]

What firmware are you using?

 

[MartinFau]

Firmware 3.0.0.4.378.7554 was running earlier this evening when it happened, which was automatically downloaded upon router install last weekend.
The autocheck in the web interface was telling me it was up-to-date.
However, I downloaded from ASUS web site the real latest firmware: 3.0.0.4.378_7838 which is running now.

 

[RMerlin]

Is it possible the RT-AC3200 can be hacked by an outsider ?
Just purchased the RT-AC3200 this weekend. I noticed this evening on the router web interface, Network Map, Client View List, that two unknown clients were connected. The interface icon associated to these two connection was the *wired* icon, which was physically impossible as only a WD My Cloud is Ethernet connected to the router.
Very worried if this router can be accessed by unauthorized outsiders.
Any one noticed such issue ?

Your security is as good as the WPA2 key that you configure on it.

 

[roldogg]

Go the the client list when you're logged into the router and click on the MAC address of these clients. It'll tell you what devices they are.

 

[MartinFau]

@RMerlin: Can never be 100% sure, but I doubt the WPA2 key was a factor, it is complex enough. Also, when I disconnected the WAN cable from the ISP modem, these two clients dissappeared from the client list.

 

[MartinFau]

@roldogg: I noted one of the two MAC addresses: 5C:8D:4E:86:77:9F

 

[RMerlin]

@roldogg: I noted one of the two MAC addresses: 5C:8D:4E:86:77:9F

This is an Apple device.

 

[RMerlin]

@RMerlin: Can never be 100% sure, but I doubt the WPA2 key was a factor, it is complex enough. Also, when I disconnected the WAN cable from the ISP modem, these two clients dissappeared from the client list.

Make sure you didn't disable the firewall on the router, and that you haven't enabled a misconfigured VPN server. You can check the System Log for more information, possibly searching for those MAC to see any mention of their DHCP leases.

 

[Zirescu]

I haven't found the client view list to ever be really reliable in any of the firmware releases. Often I've seen duplicate names in the list with different MAC addresses (almost always it's been the Apple TV and the Airport Express) overlapping. I've also seen wired interfaces shown as wireless interfaces and vice-versa. You're best bet is to rely on information under System Log tabs (Connections, Wireless Log and DHCP leases).