More Routers Found Vulnerable To Mirai Exploit

[Dan Goodin]

Dan Goodin over at ArsTechnica reports routers provided to German and Irish ISP customers for Deutsche Telekom and Eircom, respectively, have been identified as being vulnerable to Mirai malware.

The attacks are said to exploit weaknesses found in routers made by Zyxel and Speedport that leave Internet port 7547 open to outside connections. The exploits use the opening to send commands based on the TR-069 and related TR-064 protocols, which ISPs use to remotely manage large fleets of hardware.

Read the rest over at Ars.

 

[Makaveli]

Just another reason to use your own router over what the ISP provides you.

 

[Wolfclaw]

Hi all, with all the news floating around with attacks on ISP's and router flaws, are our routers vunerable to Mirai worms scanning for access?

http://www.theregister.co.uk/2016/11/28/router_flaw_exploited_in_massive_attack/

 

[AndreiV]

Hi all, with all the news floating around with attacks on ISP's and router flaws, are our routers vunerable to Mirai worms scanning for access?

http://www.theregister.co.uk/2016/11/28/router_flaw_exploited_in_massive_attack/

http://www.snbforums.com/threads/more-routers-found-vulnerable-to-mirai-exploit.35962/

Are you using a Zyxel or Speedport router , or a router that is managed by your ISP ?

You need to read the article in full.

 

[Wolfclaw]

VM Superhub2 in modem mode and RT-AC87U, was just a general query.

 

[MrJackBlack]

How does this answer the question? I'm also curious how the TR-069 implementaiton (if it exsists) within asus wrt is done.

 

[RMerlin]

How does this answer the question? I'm also curious how the TR-069 implementaiton (if it exsists) within asus wrt is done.

Asuswrt-Merlin does not implement TR-069.

 

[MrJackBlack]

Thank you very much Merlin.
As I'm a German Telekom user I'm happy to hear all that

Sad that it is still not (always) allowed to use your own modem/router in Germany. The ISPs basically force you to use their old, not updated, shirt

 

[RMerlin]

Thank you very much Merlin.
As I'm a German Telekom user I'm happy to hear all that

Sad that it is still not (always) allowed to use your own modem/router in Germany. The ISPs basically force you to use their old, not updated, shirt

Note that what I said only applies to my firmware (as your post was originally posted in its forum). Asuswrt has TR069 support, but that support is disabled (i.e. not compiled at all) for off-the-shelves routers. An ISP with a customized Asuswrt build (for instance, the TM-Ac1900) _might_ have it enabled.

 

[sfx2000]

I raised this as a concern Monday morning...

More info here...

http://www.snbforums.com/threads/dsl-router-modem-risk-soap-remote-execution-and-mirai-botnet.35955/

 

[Makaveli]

As Merlin said his firmware isn't affected by this but for those that want to check.

www.grc.com/port_7547.htm

Click on the Probe this Port.

Here are my results.