More Routers Vulnerable to RomPager Authentication Bypass

As discussed on prior blogs there are more routers that are vulnerable to the RomPager /rom-0 bypass:

D-Link DSL-2520U 1.08 Hardware Version: B1
D-Link DSL-2740R EU_1.13 Hardware Version: A1
AirLive WT-2000ARM 2.11.6.0(RE0.C29)3.7.6.1

While playing around it also seems that the D-Link routers frequently have a password of ‘263297’ making me think it is a default!

Tags: ,

3 Responses to “More Routers Vulnerable to RomPager Authentication Bypass”

  1. kifcaliphiph Says:

    there is a fix I published there http://egyptianvulture.blogspot.com/2014/06/how-to-fix-zynos-vulnerability-prevent.html

  2. kernel Says:

    How to know which version of rompager i have ?

Leave a reply to dfreamon Cancel reply