UPNP Security flaw.

[RMerlin]

Originally Posted by Bagman

I just installed Java and the Rapid 7 scan test. It identifies my RT-N66U running the latest Merlin beta as a UPnP device, but says it's not exploitable. I get the same results as KevTech does in the link in the post above.

Maybe Asus has patched the vulnerability even though they've patched to the older UPnP 1 that is listed as vulnerable?

That wouldn't surprise me. They do a lot of upstream backporting. That means minimal risk of breaking something, unlike if they were to fully upgrade the whole software.

[sfx2000]

This goes well beyond just ASUS...

http://forums.smallnetbuilder.com/showthread.php?t=9720

sfx

[RMerlin]

Originally Posted by sfx2000

This goes well beyond just ASUS...

http://forums.smallnetbuilder.com/showthread.php?t=9720

sfx

Just to reiterate: Asuswrt is NOT vulnerable. In fact, it doesn't even use the mentionned upnp stack, but relies on Miniupnpd.

This is (IMHO) another security research company trying to blow out of proportion a security hole that only affects certain routers, and fail to actually mention which ones are affected. Not every router out there runs the Broadcom stack (and some don't even use Broadcom).

[MintyTrebor]

For those who want independent confirmation, or who also run other model routers, the Shields Up firewall testing service @ www.grc.com, has been updated to incorporate a probe for these vulnerabilities (no install or registration required, all done from a web page).

It also includes a link to a Security Now podcast which explains the issue, for those who want more info.