In any scenario, publicly leaking the historical record of every device that’s ever connected to the Linksys Smart Wi-Fi router is a privacy concern that shouldn’t be taken lightly. If a remote unauthenticated attacker was able to access the device name, model number, operating system, firmware version, and MAC address of everything connected to your home router (including the router itself) – how would you classify the issue? An attacker can query the target Linksys Smart Wi-Fi router, get it’s MAC address, and immediately geolocate it. While geolocation by IP address is not precise, services like WiGLE allow anyone to get the exact geographical coordinates of a WiFi network based solely on its MAC address or SSID. If a device’s name includes the full name of the owner, this flaw allows attackers to determine the identity of owner and geolocate them via the Linksys Smart Wi-Fi router’s public IP address. This creates a fingerprint that can be used to track that device’s movement across networks. Mobile devices, such as smartphones and laptops, share this identifier every time they connect to a wireless network. What are the risks of leaking this information publicly?Ī MAC address is a unique identifier for every networked device. Other sensitive information about the router such as the WAN settings, firewall status, firmware update settings, and DDNS settings are also leaked publicly. In some cases additional metadata is logged such as device type, manufacturer, model number, and description – as seen in the example below. Operating system (such as “Windows 7” or “Android”).Device name (such as “TROY-PC” or “Mat’s MacBook Pro”).MAC address of every device that’s ever connected to it (full historical record, not just active devices).Using data provided by BinaryEdge, our scans have found 25,617 Linksys Smart Wi-Fi routers are currently leaking sensitive information to the public internet, including: How many Linksys Smart Wi-Fi routers are vulnerable? This sensitive information disclosure vulnerability requires no authentication and can be exploited by a remote attacker with little technical knowledge. The leak can also be reproduced by sending a request to this JNAP endpoint: Scroll down to JNAP (there’s multiple) and click to open itĮxample vulnerable Linksys Smart Wi-Fi EA7500 (AC1900) router.Open the developer console (F12 key) and go to the Network tab.Go to the Linksys Smart Wi-Fi router’s public IP address in your web browser.Upon further investigation, we’ve discovered a persistent flaw affecting Linksys Smart Wi-Fi routers that allows unauthenticated remote access to sensitive information. Many of these attacks aim to exploit vulnerable consumer routers. Our honeypots frequently detect scans targeting various home automation protocol endpoints.

Linksys smart wifi router password