[olug] [OT] SMC soho firewalls

[Rob Townley]

If you have an SMC router, you may want to cycle power to it, and then
try accessing port 1900 from an external ip address.  For some
firmware versions,
http://YourInternetIPaddress:1900/ brings you to the login page for
administering your router from the internet.  Luckily, i am anal about
changing the default password.

Remote administration mode does not have to be turned on.

Port 1900 is used for UPnP, but this does not have to be on in the
router, for this major flaw to exist.

It is known to exist in multiple firmware versions for  the 7004FW and
the 7008abr.

bahhumbug posted about this to the SMC forumn on www.DSLReports.com in
April for the 7008abr, i tested this on the 7004FW.

Robert Townley