The employees of Check Point found that many routers make an error when handling CWMP requests, and ISPs make this situation even more complicated: most of them do not encrypt the connection between ACS and customer equipment and do not restrict access by IP or MAC addresses. TR-069 specification allows to use it for sending settings and connecting services through auto configuration server (ACS, Auto Configuration Server). In the last ten years, ISPs do this by using CWMP (CPE WAN Management Protocol), a subscriber’s equipment management protocol. It is widely used for fast configuration of network equipment on the client side (CPE, Customer Premises Equipment). Last December, the experts from Check Point found more than 12 million routers (including some top models) and DSL modems that can be hacked due to vulnerabilities in their mechanism of automatic settings. How can you personally check the quality of firmware and adequacy of settings? You can do this by using free utilities, online test services and this article.Ĭonsumer-grade routers have been always criticized for their unreliability, but the high price does not yet guarantee high security. Today, the routers are a priority target of network attacks that allows to steal money and data while bypassing local protection systems.

As a result, the vulnerabilities are not uncommon. Often, the manufacturers of routers do not particularly care about the quality of their code.

Router security scan