Major Time-Warner Modem/Router security flaw
Saturday, October 24th, 2009
Apparently the manufacturer of Time-Warner cable’s default modem/router combo, SMC, is run by a pack of incompetent morons. Yes, I am using such strong words because they are needed to express the depth of the stupidity in how this router is setup.
First off, the default setup for these routers (model SMC8014WG-SI) is WEP encryption. Anyone who knows anything about wireless networks will tell you that WEP is pretty much useless. They can be cracked within minutes. However, it gets even better. There’s a normal user account that can only access certain options, supposedly. However, the administrative functions are apparently only restricted from non-admin users by HIDING THEM WITH JAVASCRIPT! Hence the double facepalm above. Words fail me at this point, so let me just quote the guy who found this, Dave, from his blog.
(more…)
