What's new

security issue w/ AiCloud (?)

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

donbowman

Occasional Visitor
if i open a browser to https://<myip>/<smbhost> if immediately sees the files there on 'smbhost', w/o logging in if I have the Cloud Disk feature enabled. (smbhost is the netbt name of an internal samba server).

I see
"JerryLin: namequery.c-->name_resolve_bcast: Attempting broadcast lookup for name <smbhost><0x1d> num_interfaces=[4]" come out the lighttpd when run it interactively for this case, 'smbhost'. Does this seem right? i was very surprised. The https://<myip>/ works ok, asks for a password and all. but just guessing the smbhost name bypasses.

I don't think i've mucked up something on the device (although i guess its possible).

I'm running 3.0.0.4.372.30_2.

Anyone else see this, or is it just me? I guess this is https://github.com/RMerl/asuswrt-merlin/issues/364 issue, but i thought it only allowed accessing local files on the USB of the router, not all files on the LAN.
 
Last edited:

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top