The local admin user (without root privileges) can use this TOCTOU vulnerability to gain root privileges in the router. Chmoding 777 a file and then executing it as root doesn't seem to be a good idea.
Then, the /bin/gglogd program will log all the traffic passing through the bridge0 (wlan0+eth* : wireless and ethernet) and the LTE interface (rmnet0). The resulting interception files will be written into the flash memory, so "somebody" can retrieve the logged traffic even if the router is rebooted.
Quanta Router Update
/bin/gglogd is not started by default but it is suspicious that (1) this kind of the program is present in this router, (2) the program will fix the tcpdump dependencies on its own (tcpdump doesn't work by default in the firmware image) and (3) intercepting files are stored in a persistent storage. This intrigues further thoughts what the developer wanted to achieve from these settings.
Insecurity in IPnP was hype 10 years ago (in 2006). The security level of the UPNP program (miniupnp) in this router is lowered volontary as shown below and allows an attacker located in the LAN area to add Port forwarding from the Internet to other clients located in the LAN:
In the configuration of the vulnerable router where there are no permission rules, an attacker can forward everything from the WAN into the LAN.From example, an attacker can add a forwarding rule in order to allow traffic from the Internet to local Exchange servers, mail servers, ftp servers, http servers, database servers...In fact, this lack of security allows a local user to forward what they want from the Internet into the LAN as shown below with the miranda tool.
As the router has a sizable memory (168 MB), a decent CPU and good free space (235 MB) with complete toolkits installed by default (sshd, proxy (/bin/tinyproxy -c /var/tproxy.conf), tcpdump ...), I advise users to trash their routers because it's trivial for an attacker to use this router as an attack vector (ie: hosting a sniffing tool, LAN hacking, active MiTM tool, spamming zombie).
The reader must understand that not all the vulnerabilities have been disclosed. There is a lot of interesting undisclosed findings in this router (including RCEs) and I encourage security researchers to analyze the binaries provided by the firmware (We can agree I already did my part).
Given the vulnerabilities found, even if the vendor changes its mind and decides to patch the router, I don't think it is even possible as it needs major rewrites in several main components (the ASM code shows very bad security practices in several binaries).
Kim has documented the mostly hopeless security around routers before. He dug up a slew of similarly damning flaws in routers made by Huawei last fall, including XSS, CSRF, and denial of service bugs. Last summer he detailed flaws in almost 20 different kinds of routers made by TotoLink, including some RCE vulnerabilities that existed in the products since 2009.
The RT-205 provides an instant solution to networking needs for businesses and consumers. The device comes with an impressive data transfer speed o...AirTies RT-210 Air 5020Air 5020 is an ADSL2+ compliant router that instantly connects to the available modem. The device has two available ports to enable networking of t...AirTies RT-210 RT-211RT-211 pushes the network capability of Wireless-G Network. The device features G++ technology that improves the data transfer speed up to 125mbps....LevelOne FBR-1402TXThis well-built router comes with advance features that will surely take your internet experience to the next level. The LevelOne FBR-1402TX featur...Netgear KWGR614The KWGR614 is shipped with an open source firmware which allows network administrators to customize the firmware based on their requirements. With...if(typeof ez_ad_units!='undefined')ez_ad_units.push([[250,250],'routeripaddress_com-banner-1','ezslot_7',106,'0','0']);__ez_fad_position('div-gpt-ad-routeripaddress_com-banner-1-0');SEM INDIA DNA-2011 DNA-2011Default Re: Firmware of ITI DNA-A211-I (BSNL Type - II). i flashed the router with firmware available on this page Welcome to SEMINDIALevelOne FBR-1411TXThe LevelOne FBR-1411TX is well-built 1W,4L high performance broadband router w/VPN/DMZ port. It also comes with standard features such as auto-sen...Actiontec GT724WG TDS FirmwareFor TDS ServiceFirmware Version: 3.130.4.13 Products in 1Full-rate, ADSL Modem4 Port DSL RouterBuilt-in Wireless Networking (802.11g)...ASUS ASUS SMTA Router ASUS SMTA RouterFirmware: 3.5.1.3(C0.0.7.4) - Hardware: 1100(AVG6002 REV:2.26A)Asus. Product: ASUS SMTA Router. Version: Firmware: 3.5.1.3(C0.0.7.4) - Hardware: 11...Netgear WGR614v7Another iteration of Netgear's router brings stability to the network as this update fixes possible IP address problems. The device comes with 4-LA...
Wait for the upgrade to complete, and then click the Refresh button to refresh the VxRail Manager GUI. It may take several minutes for the GUI to update. Once the Refresh has completed, click Installed Versions to verify the VxRail component versions.
How to download and update firmware quanta mobily 4g router firmware Download ZTE firmware update gadget is very important as many of its owners regularly make the upgrades in order to make their gadgets to function ...
How to download and update firmware quanta mobily 4g router firmware Samsung firmware : being one of the leading producers of electronic gadgets including mobile phones, Samsung very often releases Stock Firmware ROM ...
How to download and update firmware quanta mobily 4g router firmware Download digital photo Cameras firmware : most of the camera s internal parts including lenses, autofocus, LCD screens etc. are controlled by ...
These Quanta Microsystems credentials are needed when doing a login to the Quanta Microsystems router's web interface to change any settings. Since some of the models don't follow the standards, you can see those in the table below.
Below the table are also instructions on what to do incase you forget your Quanta Microsystems router password, need to reset your Quanta Microsystems router to its factory default password, or the password reset doesn't work.
Have you changed the username and/or password of your Quanta Microsystems router and forgotten what you changed it to? Don't worry: all Quanta Microsystems routers come with a default factory set password that you can revert to by following the instructions below.
Your Quanta Microsystems router should now be reset to its brand new factory settings, Check the table to see what those are (Most likely -/-). If the factory reset didn't work, check out the Quanta Microsystems 30 30 30 factory reset guide .
Make sure that you have followed the reset instructions correctly as the Quanta Microsystems routers should always rever to their factory default settings when reset. Otherwise, there is always the risk that your router is damaged and might need to be repaired or replaced.
To access a Quanta router (for example: Mobily-4G ,CB2 or Mobily 4G ) you need the corresponding login data and IP address. If you do not know the IP and login information of your router, you will find them in the Quanta Router Manual.In case you don't have a manual or don't feel like searching for the data, you can easily use the following login guide.
Open your browser (on desktop or mobile) and enter 192.168.2.1 (this is the most common default router IP for Quanta routers according to our database) in the address bar to access admin panel of your router.
For example, if you want to change the security settings of your Quanta router, you need the router IP address. Hardly anybody knows their router IP, because you only need it in rare cases. Often you can find it on the back of your Quanta router or in the manual. If you can't find the IP anywhere, you can try the IP addresses from the list below. One of them should lead you to the login page of your Quanta router.
CB2 - ManualThese methods don't work for me and I still not get access to my Quanta router!Nothing helped and you don't have access to your router? Then you can do a factory reset.In most cases you can perform a factory reset by pressing a small button on the back of your Quanta router for about 10-20 seconds.Afterwards your Quanta router lights up and needs several minutes to reset the settings.Because of the factory reset your Quanta router loses the connection to all other connected devices and some devices have to be reconnected to the router after such a reset.If you are unsure, you should consult an expert to help you set up the router again.
To get access to every router of Quanta Microsystems (e.g. (NTT Docomo) QD8 ,EM112 or EM113-MV ), you need the IP of your router, the username and router password. You can find these information in Quanta Microsystems router manuals. But if you do not have the manual for your router or you do not want to read the whole manual to find the default login information then you can use the quick guide below.
Open your internet browser (e.g. Chrome, Firefox, Opera or Internet Explorer)
Click HERE to auto detect your router IP. After some seconds our tool will show you a link to your router login page. Click on this link.
You should see 2 text fields where you can enter a username and a password.
Check the bottom of your router. There you will find your login credentials. If not then have a look at the manual of your router.
Enter the username & password, hit "Enter" and now you should see the control panel of your router.
If above login credentials doesn't work then try this methodIf these steps doesn't work for you and you still can't login to your router then there's another method. You know the model name/ID of your Quanta Microsystems router? Great! Just select your device from the box below and you will be redirected to our guide especially for your device that includes a user manual. 2ff7e9595c