Unauthenticated RCE in Motorola's MR2600 Router
1–10 of 32 posts
Re: Unauthenticated RCE in Motorola's MR2600 Router
#2>42 hosts with remote management
>vender doesn’t want to fix it
Sometimes I wonder if the white hat hackers who find such a thing should just take it a step further and patch those hosts. Take the firmware, fix those bugs and update those 42 routers.
Re: Unauthenticated RCE in Motorola's MR2600 Router
#3>42 hosts with remote management >vender doesn’t want to fix it Sometimes I wonder if the white hat hackers who find such a thing should just take it a step further and patch those hosts. Take the firmware, fix those bugs and update those 42 routers.
Probably simpler to brick them, forcing the owners to upgrade to a modern and supported device.
Re: Unauthenticated RCE in Motorola's MR2600 Router
#4In Germany we have "Störerhaftung" where routerowners are responsible for everything that happens through their router.
I wonder how this would hold up in court, couldn't you argue that routers are generally buggy, how can they force any responsibility if they can easily be hacked?
Re: Unauthenticated RCE in Motorola's MR2600 Router
#5In Germany we have "Störerhaftung" where routerowners are responsible for everything that happens through their router. I wonder how this would hold up in court, couldn't you argue that routers are generally buggy, how can they force any responsibility if they can easily be hacked?
Nearly every stock consumer router keeps getting these RCE’s. Perhaps that’s the point, they can get any arbitrary household in trouble if it’s expedient to do so.
Re: Unauthenticated RCE in Motorola's MR2600 Router
#6>42 hosts with remote management >vender doesn’t want to fix it Sometimes I wonder if the white hat hackers who find such a thing should just take it a step further and patch those hosts. Take the firmware, fix those bugs and update those 42 routers.
Isn't just as illegal as exploiting them for nefarious purposes? That's a pretty big risk to take to help a few dozen strangers on the Internet. What happens if your fix has an unforeseen interaction with some configuration on a remote system and your actions cause outage or worse?
Re: Unauthenticated RCE in Motorola's MR2600 Router
#7>42 hosts with remote management >vender doesn’t want to fix it Sometimes I wonder if the white hat hackers who find such a thing should just take it a step further and patch those hosts. Take the firmware, fix those bugs and update those 42 routers.
That would be “gray hat”. It would be illegal, though it has happened in the past and to my knowledge no one has yet been prosecuted for illegally fixing vulnerabilities.
But it’s definitely not white hat.
Re: Unauthenticated RCE in Motorola's MR2600 Router
#8>42 hosts with remote management >vender doesn’t want to fix it Sometimes I wonder if the white hat hackers who find such a thing should just take it a step further and patch those hosts. Take the firmware, fix those bugs and update those 42 routers.
Probably simpler to brick them, forcing the owners to upgrade to a modern and supported device.
Re: Unauthenticated RCE in Motorola's MR2600 Router
#9>42 hosts with remote management >vender doesn’t want to fix it Sometimes I wonder if the white hat hackers who find such a thing should just take it a step further and patch those hosts. Take the firmware, fix those bugs and update those 42 routers.
Just flash OpenWRT to them? :) (a script could prepare a matching default config)
Re: Unauthenticated RCE in Motorola's MR2600 Router
#10Vendor wise, these were never really made by a “Motorola” -this is a Zoom router (thus the domain) that used the Motorola name under license.
The “old” Motorola router division Motorola Home got sold to Arris _without_ the brand name in 2013, and then the brand name went to Zoom in 2016. Zoom merged with another vendor called Minim, went bankrupt in 2023, and the assets were bought by a company called e2Companies in 2024.
So e2Companies is who the author should email, but good luck. I’m shocked these were even “maintained” until 2024.