There is no end to users problem when it comes to security. Everything is easily hackable - from home wireless routers to the large web servers that leak user's personal data into the world in one shot.
If you love to travel and move hotels to hotels, then you might be dependent on free wi-fi networks to access the Internet. However, next time you need to be extra cautious before connecting to hotel's Wi-Fi networks, as it may expose you to hackers.
Security Researchers have unearthed a critical flaw in routers that many hotel chains depend on for distributing Wi-Fi networks.
The Security vulnerability could allow a hacker to infect guests with malware, steal or monitor personal data sent over the network, and even gain access to the hotel's key-card systems and reservation.
Hacking Guest WiFi Router
Several models of InnGate routers manufactured by ANTlabs, a Singapore firm, have a security weakness in the authentication mechanism of the firmware.
The security vulnerability (CVE-2015-0932), discovered by the security firm Cylance, gives hackers direct access to the root file system of ANTlabs.s InnGate devices.
With root access, hackers could be able to read or write any files from or to the devices' file system respectively, including data that could be used to infect the devices of WiFi users.
How The Vulnerability Works?
The Flaw lies in an unauthenticated Rsync daemon running on TCP 873 used by the ANTlabs devices. The Rsync daemon is an extraordinarily versatile file copying tool widely used to backup file systems as it can automatically copy files from one location to another.
The Rsync daemon can be password-protected, but the ANTlabs device that uses it requires no authentication.
Once hackers have connected to the Rsync daemon, they are able to read and/or write to the file system of the Linux-based operating system without any restrictions.
Resources:
Hackers new by AliensSkill.
