Significant security flaws detected in Home Routers

"Alarming findings are published in the 'Home Router Security Report
2020' by the Fraunhofer Institute for Communication, Information
Processing and Ergonomics FKIE. Of the 127 home routers tested from
seven major manufacturers, nearly all were found to have security
flaws, some of them very severe. The problems range from missing
security updates to easily decrypted, hard-coded passwords and known
vulnerabilities that should have been patched long ago.
A team led by Peter Weidenbach and Johannes vom Dorp in the Fraunhofer
FKIE’s Cyber Analysis & Defense department had downloaded the latest
available firmware as of March 27, 2020. This is the same software
that manufacturers offer to customers who have one of these 127
routers in service for private home use.
The security flaws were detected and identified using the Fraunhofer
FKIE's Firmware Analysis and Comparison Tool (FACT). 'The evaluation
showed that not a single router was free of flaws. Some of them were
even affected by hundreds of known vulnerabilities. Of the routers
tested, 46 had not received a security update in the preceding twelve
months,' reports IT security expert and FKIE scientist Peter
Weidenbach. The extreme case among the evaluated devices had not
received a security update for more than 5 years.(...)"
More:
<https://www.fkie.fraunhofer.de/en/press-releases/Home-Router.html>
Report:
<https://www.fkie.fraunhofer.de/content/dam/fkie/de/documents/HomeRouter/HomeRouterSecurity_2020_Bericht.pdf>

Happy networking! ;-)


Yrrah