Most of the GPON home gateways are found in Mexico, Kazakhstan, and Vietnam.
30th April, 2018, By Zack Whittaker
Over a million fiber routers can be remotely accessed, thanks to an authentication bypass bug that’s easily exploited by modifying the URL in the browser’s address bar.
The bug lets anyone bypass the router’s login page and access pages within — simply by adding “?images/” to the end of the web address on any of the router’s configuration pages, giving an attacker near complete access to the router. Because the ping and traceroute commands on the device’s diagnostic page are running at “root” level, other commands can be remotely run on the device, too.
Powered by WPeMatico