D-Link and Comba routers have multiple vulnerabilities, including storing passwords in plain text

A security researcher has revealed details of a series of vulnerabilities in routers made by D-Link and Comba which make it easy to see usernames and passwords. Simon Kenin from Trustwave SpiderLabs -- an "elite team of ethical hackers, forensic investigators and researchers" -- found a total of five security flaws which involve the insecure storage of credentials. In some instances, passwords are stored in plain text and can be seen by anyone with network or internet access to the routers in question. Explaining Kenin's findings in a blog post, SpiderLabs' Karl Sigler says that the D-Link DSL-2875AL dual band… [Continue Reading]