Asus Wi-Fi Software's Vulnerability Allows Hackers To Access Users' Devices

Aadhya Khatri - Nov 06, 2019


Asus Wi-Fi Software's Vulnerability Allows Hackers To Access Users' Devices

Recently, experts have found a flaw in the Wi-Fi software of ASUS that allows hackers to access users’ network as well as Alexa and other smart home devices

Recently, experts have found a flaw in the Wi-Fi software of ASUS that allows hackers to access users’ network as well as Alexa and other smart home devices.

The vulnerability is in AsusWRT, a graphical interface that collaborates with routers to create Wi-Fi networks. What the app does is to serve as a centralized point for users’ tablets, smartphones, laptops, and other devices. It is also the vulnerability that hackers can exploit to attack the network.

Asus-AsusWRT-flaw
The vulnerability is in AsusWRT, a graphical interface that collaborates with routers to create Wi-Fi networks

The researchers are able to access devices’ names, longitude and latitude coordinates, usage information and IFTTT commands, and other information from the exploit. However, none of the data that can be used to trace back to users is viewable.

However, if hackers use this vulnerability, they are still able to identify users by cross-referencing. They can find out about the home address of users by using IP address, longitude, and latitude.

Hackers can use this vulnerability to monitor users while they are at home, hence knowing when they will be out and then plan a robbery. If the houses are protected by smart locks, the bad actors can compromise Alexa devices to unlock the doors too.

The vulnerability can pave the way for hackers to infect users’ devices with viruses, ransomware, malware, and spyware. Users’ sensitive information may fall victim of these attacks as bad actors can get into their email addresses and other personal accounts.

The experts said that other IT professionals have found out about the exploit before but it was not until now Asus is informed about it. For now, it is unclear if any hacker has attempted to take advantage of the vulnerability. Asus has not commented anything on this matter either.

The vulnerability has been patched but users of AsusWRT should uninstall it and contact Asus for a measure they can take to protect themselves.

Tags

Comments

Sort by Newest | Popular

Next Story