SOHOpelessly Broken contest finds vulnerabilities in ASUS RT-AC66U

[eak]

DEFCON Router Hacking Contest Finds AC66U Vulnerable

ASUS AC66U; reported, but no response from the manufacturer. What can we do about this?
https://www.eff.org/deeplinks/2014/...-contest-success-fun-learning-and-profit-many

 

[ColinTaylor]

Duplicate post (http://forums.smallnetbuilder.com/showthread.php?t=19966)

Also, Bad link (correct link in other post).

 

[john9527]

Long discussion already open and can be found here.....
http://www.smallnetbuilder.com/forums/showthread.php?t=18922

 

[eak]

DEFCON Router Hacking Contest Finds AC66U Vulnerable

Thanks. I actually tried to avoid an additional post by searching the forum for DEFCON, but the search claimed no matches. I wonder what wrong with that?

 

[john9527]

It's in another subforum off the parent....when doing searches it's generally better to go up one level to the parent and start there.

 

[RMerlin]

Moving this to Asus Wireless, since I'm not the manufacturer, so this doesn't belong in the Asuswrt-Merlin sub-forum

 

[RMerlin]

Actually, I'm going to merge that to the second thread since it's indeed a duplicate of that one.

 

[eak]

it was the latest firmware when the contest was announced

The firmware they "hacked" for the RT-AC66U was 5517, a few months old. The latest is 1123 released July 7, 2014. Can't speak to the other routers, but the firmware they stated in the rules for the RT-AC66U required 5517, and so was indeed out-of-date.

Since the contest was announced June 24, 374.5517 was the latest firmware at the time (376.1123 came out on July 7).