ON Telecoms ISP (Greece) - *HUGE* Security Hole!

*** Afto to keno asfaleias diorthotike molis 3 meres meta to upload tou video ***
To video apotelese meros mia synolikis prospatheias na allaksei i politiki tis ON Telecoms oson afora tin asfaleia kai to kataferame. Perisoteres plirofories edw:
http://www.adslgr.com/forum/showthread.php?t=88701

Se afto to videaki tha deite tin aparadekti politiki tis ON Telecoms, pou dinei ton router tis me to idio username/password gia OLOUS tous syndromites, xoris na tous dinei ti dynatotita na to allaksoune!

*** This security hole was fixed just 3 days after uploading this video ***
Here's an example of to how access a router owned by a user of ON Telecoms, given the default username/password: on/on, which cannot be changed!

Category:

News & Politics

Tags:

• ON
• Telecoms
• ISP
• Greece
• Security
• Hole
• Router
• Pirelli

[RainbowKnightGR]

ο τυπάς λέει μαλακίες!! εγώ το έχω αλλάξει και το pass και το id....

[psyxakias]

@RainbowKnightGR sygxaritiria.. to oti exoun perasei 3,5 xronia apo tin mera pou anevike to video, den sou leei tipota e?

[giorgosma]

re file na3eres poso periergo mou akougete pou akouw eliniki foni sto youtube mou fenete poli periergo

[Anorimoc7]

re pedia to dns dn yparxei sto pirelli?

[DuDekilleR7]

@chrisakosGr prin apo 3 xronia p ekane to comment h on itan ontos gia ton poutso! :P

[tasoulismt2hii]

i ama ipaxri kapio setup na kate baso apo kapou re pedia apa ntistemou ama 3erete kati ine ana gki

[tasoulismt2hii]

giasas exo 1 pro blima mipos 3erete pos mporo na sin deso to router pireli se cone-x exo prospafisi ala den mporo mipsos xeri kapiops na mou apa ntisi a exo mono 1 sinti pou ine gia uespi sas para kalo ama 3eri kapios na mou apantisi :(

[jimseitman]

@Makafuckas3 Το βρήκες... Κερδίζεις χρυσούν ωρολόγιο

[psyxakias]

@Makafuckas3 to video apotelese meros mia synolikis prospatheias na allaksei i politiki tis ON Telecoms oson afora tin asfaleia kai ta username/passwords tou router kai kataferame telika na allaxthei pros ofelos twn anypopsiastwn xristwn... perisoteres plirofories sto link tis perigrafis tou video

[fragkiskos1989]

Σωστός. Όντως για κάποιο μικρό διάστημα γινόταν αυτό μέχρι να βγεί νέο firmware που επέτρεπε την αλλαγή του password. Σίγουρα τίθεται θέμα ασφάλειας αν και το on/on δεν σου δίνει admin access στο CPE. Εγώ πάντως μεγαλύτερο κενό ασφαλείας από αυτό θεωρώ ότι απο default τα CPE της ON είχαν ξεκλείδωτο το wi-fi όπως και στο video.

[raqka2010]

να βοηθήσει με τον τύπο του μόντεμ cd Pirelli Wireless_VoIP_AG_v1

[Makafuckas3]

@Ayger74 eisai sigouros re file?pios malakas apo thn on tha kathotan na dei ta video p vgainoun sto youtube re...ama to skefteis sta arxidia ts kiolas...diafimisi ths etairias ts ginete mesw tn video...k emeis k kathomaste k sizitame giaftous...fenete oti epiase h diafimisi ts...k dn ksereis kiolas an o psixakias doulevei k sthn on...:)