- Apr 1, 2019
- 2,786
Thankfully one of my other nerdy pursuits has been my home network.
Billions of devices affected by UPnP vulnerability
- Thread starter CyberTech
- Start date
- Aug 12, 2015
- 967
Some games require UPnP too.
Hmm... I have it enabled in router's settings, but looks like everything is find on my end.
Yes, people still torrent. Those pirate streaming sites offer movies and TV shows in low quality, constantly buffering (sometimes not working links) and without possibility to watch content with subtitles.People still Torrent (leechers vs seeders)? There are literally hundreds of streaming services out available.
What do you make of this UPnP and Port Forwarding, since I need the Open NAT for online games?
How to get Open NAT on Xbox One by enabling UPnP — and why you should
UPnP keeps your multiplayer gaming running smoothly.www.windowscentral.com
- Apr 1, 2019
- 2,786
That GRC test only shows if UPnP responds to external pings, which it shouldn't. What brand router do you have?
- Aug 12, 2015
- 967
It's the router I got from my ex ISP back in 2013. I mean, it's so old that company literally changed three times. ISP I got it from was bought by Telekom Austria. Then after a few years, there was migration of users to local ISP already owned by Telekom Austria company — Vipnet. And then two years ago, there was total rebranding of current ISP to A1, to match other ISP's under Telekom Austria group.
The router's brand is Telsey and the model is CPL7. You probably never heard for it; neither did I until I got it.
- Apr 1, 2019
- 2,786
I posted the article on the Small Netbuilder Forums. I'm hoping Merlin will comment on it. He the most knowledgeable person I know who can speak to this.
- Apr 1, 2019
- 2,786
You are right, I have never heard of them. The one router company I know uses miniUPnP is ASUS. If you use Merlin's firmware he keeps it up to date to the latest version at all times.
- Aug 12, 2015
- 967
I could ask my ISP for newer router, but this one still works fine except I get only half of internet speed via Wi-Fi.
- Apr 1, 2019
- 2,786
As long as the firmware is kept up to date it should be good. A lot of vendors abandon updating firmware and closing vulnerabilities rather quickly. You may want the new one just to make sure you are getting the latest firmware updates (especially if it's of no cost to you).I could ask my ISP for newer router, but this one still works fine except I get only half of internet speed via Wi-Fi.
- Sep 10, 2015
- 901
If you can telnet/ssh into the router you can see miniupnd version and other things like the kernel version
Lemon60
Level 2
- Jun 11, 2019
- 71
- Apr 1, 2019
- 2,786
Though for security you might want to keep SSH shut down when you aren't using it.
- Aug 12, 2015
- 967
What firmware? Since I have this router, I haven't had updated it once. As a user, don't even have an option to update it.
I had to literally dig the admin password in the router source code to access admin so I could change DNS servers. There is option for updating the firmware, but it can only be updated by loading file from computer. I honestly doubt there is any new firmware for this old router.
Most of these routers ISPs give us are garbage. I heard they got some new Huawei ones (which support 802.11ac dual-band Wi-Fi) and I'm still shocked.
- Sep 10, 2015
- 901
Let's keep an MT secret! I once telneted into a WPS vulnerable wifi network and ran a rm -rf --no-preserve-root, then nobody else was able to connect including me but the SSID was still broadcasted, it was a fiberhome/ZTE ISP router (the ISP uses the same telnet passwords for all routers).
- Sep 10, 2015
- 901
you need terminal access to see the miniupnpd versionThough for security you might want to keep SSH shut down when you aren't using it.
- Mar 16, 2019
- 3,635
Now you guys are just talking in a language I don't understandThough for security you might want to keep SSH shut down when you aren't using it.
- Sep 10, 2015
- 901
telnet and ssh are similar protocols but ssh can be configured to use encryptionNow you guys are just talking in a language I don't understand
- Dec 12, 2016
- 1,148
Don't worry I'm just brute forcing your ssh with my powerful graphics card in no time XD .Though for security you might want to keep SSH shut down when you aren't using it.
- Apr 1, 2019
- 2,786
True, or access to firmware update notes. But, you could enable it to check, and then disable it when you don't need to get in if you don't do it regularly.
- Sep 10, 2015
- 901
most consumer routers come with a harcoded ssh/telnet password that the user can't change, so it won't take too much really
- Apr 1, 2019
- 2,786
Similar threads
