Home page logo
/

bugtraq logo Bugtraq mailing list archives

Unauthorized console access on Satechi travel router v1.5
From: Luc Dore <ldore () mailc net>
Date: Fri, 22 Nov 2013 07:40:27 -0800

Satechi makes a travel router that broadcasts a protected wifi network that can be configured connect to either a wired 
or wireless network on it’s public (wan) interface. It runs a customized dd-wrt build from version 2.4

The router is configurable via a web interface available within its protected (pan) network.

A exploit is available when the router’s public interface is configured to use a wifi network; where the web management 
console is available externally via http. The router’s web management via wan setting has no effect in this particular 
situation. the web console is available via any browser like http://<ip of wan interface>

The exploit cannot be reproduced when the router’s public interface  is on a wired network and in this case the web 
management via wan setting is behaving as expected.

Strong recommendation that users of the Satechi travel configure the router use http authentication to prevent 
unauthorized console access.

Vendor has been contacted


Luc Dore
ldore () mailc net



Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail


  By Date           By Thread  

Current thread:
  • Unauthorized console access on Satechi travel router v1.5 Luc Dore (Nov 22)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault