vpnMentor: Asus Router App Leaks Customer Data and Exposes Alexa Users

[XIII]

vpnMentor: “Asus Router App Leaks Customer Data and Exposes Alexa Users”

https://www.vpnmentor.com/blog/report-asus-alexa-leak/

Pretty confused by this article...

What is “the AsusWRT App”? (Mobile App? Web interface?)

Where can we find relevant details?

 

[Paliv]

vpnMentor: “Asus Router App Leaks Customer Data and Exposes Alexa Users”

https://www.vpnmentor.com/blog/report-asus-alexa-leak/

Pretty confused by this article...

What is “the AsusWRT App”? (Mobile App? Web interface?)

Where can we find relevant details?

They seem to be confused in the ASUS terminology themselves. vpnMentor is pretty worthless in terms of quality most of the time anyway.

 

[OzarkEdge]

They seem to be confused in the ASUS terminology themselves. vpnMentor is pretty worthless in terms of quality most of the time anyway.

Appears so. Asuswrt is router firmware, not an app.

However, I'm inclined to suspect that a mobile app for managing one's router/network is inherently vulnerable for various reasons relating to the mobile OS and the mobile device and their usage scenarios, so I can believe any report of a compromise. Such apps are to be avoided, imo... just not necessary.

OE

 

[Paliv]

Appears so. Asuswrt is router firmware, not an app.

However, I'm inclined to suspect that a mobile app for managing one's router/network is inherently vulnerable for various reasons relating to the mobile OS and the mobile device and their usage scenarios, so I can believe any report of a compromise. Such apps are to be avoided, imo... just not necessary.

OE

It’s odd that they claim to have found the vulnerability through broad use of port scanners. They are very unclear if they are stating the app or the firmware had the vulnerability, and if it’s related to the old issue of the app opening up WAN access. It feels quite clickbaity, but I wouldn’t be surprised either if it was a new vulnerability.

 

[RMerlin]

...unprecedented access...

In the meantime, uninstall AsusWRT and disconnect any device from your home network.

They also state that the issue was reported AND fixed on September 15th, yet they say later that people should uninstall Asuswrt (someone tell me how you're supposed to do that) until Asus fixes it... Uh...

Ok, credibility = zero...

 

[Adamm]

Article looks like it was written by a 10 year old with the occasional buzzword in bold text to try give the article credibility. Can someone explain what the "AsusWRT database" is

The author is also conveniently listed as;

Guy Fawkes
Anonymous Cybersecurity Experts

Anonymous experts who write for vpnMentor but keep their identity secret.

I'm not buying it

 

[royarcher]

Article looks like it was written by a 10 year old with the occasional buzzword in bold text to try give the article credibility. Can someone explain what the "AsusWRT database" is

The author is also conveniently listed as;



I'm not buying it

It sounds like someone is taking the pi5