Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


pdh



112 posts

Master Geek


#160031 21-Dec-2014 02:04
Send private message

Should we Vodafone customers using the Huawei HG659 router be worried about exploits targeting a weakness in some versions of Router software ?  I have an HG659 on my Vodafone fiber connection.

I believe that Vodafone makes use of a remote management protocol (they have remotely changed settings on mine) - and possibly the protocol (called TR-069 ?) that may expose the flawed code (RomPager) allowing remote attack.

I have googled for any hard info - to see if I would want to shut off that protocol (at least temporarily) - but I don't find anything.

Anyone know if there's a real risk (with this model) ?

Create new topic
5 posts

Wannabe Geek


  #1201747 22-Dec-2014 09:14
Send private message

According to the Checkpoint press release about it, "Huawei - Home Gateway" is specified as vulnerable. It's not very specific on the model though. I would err on the side of caution on this.

http://mis.fortunecook.ie/misfortune-cookie-suspected-vulnerable.pdf

pdh



112 posts

Master Geek


  #1201904 22-Dec-2014 11:25
Send private message

Yeah, I saw that 'Home Gateway' reference and wondered... but I believe that we have seen at least two generations of Huawei routers distributed (as an ISP standard product) here in NZ - and presumably many more throughout the rest of the world. So I thought it rather inconclusive as a threat alert for the HG-659..

I have skimmed through the set-up menus on the HG-659 and I didn't come across any reference to enabling/disabling the Remote Access. I may have missed it - or it may be on a 'secret handshake' page of settings.

There doesn't seem to be much follow-up chatter about this 'Misfortune Cookie' threat - all the stories simply parrot the same initial 'release'. Bit surprising.

 
 
 
 


1044 posts

Uber Geek

Trusted

  #1201923 22-Dec-2014 11:38
Send private message

pdh: Yeah, I saw that 'Home Gateway' reference and wondered... but I believe that we have seen at least two generations of Huawei routers distributed (as an ISP standard product) here in NZ - and presumably many more throughout the rest of the world. So I thought it rather inconclusive as a threat alert for the HG-659..

I have skimmed through the set-up menus on the HG-659 and I didn't come across any reference to enabling/disabling the Remote Access. I may have missed it - or it may be on a 'secret handshake' page of settings.

There doesn't seem to be much follow-up chatter about this 'Misfortune Cookie' threat - all the stories simply parrot the same initial 'release'. Bit surprising.


Are you logged in as an admin?

If you have the HG659a (Vodafone one) the login is 'Admin' / VF-NZhg659

I can't remember exactly where it is but there are two options to disable remote access. Both Tr-069 and 'Remote Access'

pdh



112 posts

Master Geek


  #1201976 22-Dec-2014 12:44
Send private message

Thanks

Have disabled Remote Access.

I will look at this again in the New Year - as I guess there is some merit in allowing Vodafone to update the HG-659 if they need to... although I prefer the model of being alerted to the need & doing an upgrade myself.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New online learning platform for kids stuck at home during COVID-19 lockdown
Posted 26-Mar-2020 21:35


New 5G Nokia smartphone unveiled as portfolio expands
Posted 26-Mar-2020 17:11


D-Link ANZ launches wireless AC1200 4G LTE router
Posted 26-Mar-2020 16:32


Ring introduces two new video doorbells and new pre-roll technology
Posted 17-Mar-2020 16:59


OPPO uncovers flagship Find X2 Pro smartphone
Posted 17-Mar-2020 16:54


D-Link COVR-2202 mesh Wi-Fi system now protected by McAfee
Posted 17-Mar-2020 16:00


Spark Sport opens its platform up to all New Zealanders at no charge
Posted 17-Mar-2020 10:04


Spark launches 5G Starter Fund
Posted 8-Mar-2020 19:19


TRENDnet launches high-performance WiFi Mesh Router System
Posted 5-Mar-2020 08:48


Sony boosts full-frame lens line-up with introduction of FE 20mm F1.8 G large-aperture ultra-wide-angle prime Lens
Posted 5-Mar-2020 08:44


Vector and Spark teamed up on smart metering initiative
Posted 5-Mar-2020 08:42


Schneider Electric launches new PDL Pro Series designed specifically for the commercial building market
Posted 5-Mar-2020 08:39


Kiwi app Pedigree DentaStix Studios uses pet images to counter impact of negative social media Content
Posted 5-Mar-2020 08:32


Samsung expands to New Zealand in 5G Networks Deal with Spark
Posted 5-Mar-2020 08:17


New Vodafone mobile data plans with unlimited data
Posted 26-Feb-2020 06:55



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.