Help my Linksys WRT54G router was broken into using the "curl" command

Debbie Hurley · 2007-07-04T07:37:07+00:00

It's way too easy to break into the Linksys WRT54G router!Instantly bypassing the administrator password, my fifteen-year oldneighbor broke into my Linksys WRT54G router (firmware revision v1.0.0.6)in ten seconds simply by sending this one "curl" command to it via theInternet from his home next door!c:\> curl -d "SecurityMode=0&layout=en" http://192.168.0.1/ kid was kind enough to knock on my door today to tell me to fix it.I invited him in, and from inside my own house, he showed me the LinksysWRT54G command above which immediately disabled all my wireless securityWITHOUT him having to enter any password!He showed me how to disable remote administration but he said thevulnerability still exists until I get a new router. I can't believeeveryone with a Linksys WRT54G router is throwing it in the garbage.Where/how can I find a firmware update that protects me from thisvulnerability?

Jul 04, 2007 60 Replies

Rate this thread:

Jeff Liebermann 19 years ago

John Gray hath wroth:

From the same article at:

"To support third-party firmware, Linksys has re-released the WRT54G v4, under the new model name WRT54GL (the 'L' in this name allegedly stands for 'Linux')." My inspection of both boards shows that the v4 and GL are identical inside. However, that was a while ago and the GL may have mutated in the meantime.

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required