Re: [PLUG] Hackers are opening SMB ports on routers so they can infect PCs with NSA malware

[Rich Freeman <r-plug@thefreemanclan.net>]

On Thu, Nov 29, 2018 at 12:45 PM Mike DePaulo <mikedep333@gmail.com> wrote:
>
> On Thu, Nov 29, 2018 at 12:32 PM Rich Freeman <r-plug@thefreemanclan.net> wrote:
> >
> > On Thu, Nov 29, 2018 at 12:18 PM jeff <jeffv@op.net> wrote:
> > >
> > > On 11/29/18 12:02 PM, Michael Leone wrote:
> > > > Is UPnP routinely turned on, when you buy a new router? I didn't think
> > > > it was. Which means you, or something on your LAN, turned it on, in the
> > > > first place ...
> Most consumer routers enable it by default.

I'm not sure if UPnP is part of this particular vulnerability.

I checked and it is apparently off by default in EdgeOS, which is what
I'm currently using.  So is SNMP.  Both are supported but must be
enabled in configuration.  Ubiquiti has their own management system
that would seem to be intended to replace SNMP which looks like it is
open source, but I haven't dug into the details.

-- 
Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug