NUMEROUS kernel exploits and vulnerabilities

For Developers
1

FYI:

5

When I already login locally as root on my router, what local privilege escalation remains to be exploited? Should I change my own password? :grinning_face:

6

To be honest when looking at all these cyber hacking things going on nowadays, to this day using any meaningful password at all seems to be the biggest obstacle for the criminal activities.

The other break in to networks seems to be more of a Connect-as-a-paid-service without any security than actual qualified hacking.

So the old defence tactic still applies in cyber, just make the obstacle bigger on your things than the neighbor thing, then you are left alone…

It was like when I started using OpenVPN with the official standard port of 1194 the dos attacks was never ending and the intrusion attempts was almost daily after a year.

Just use another non official “secret” port and no one has touch the VPN tunnel again over almost 10years.

And do not connect your fridge to the internet, if you want to eat!

7

When i do a simple wifi scan in the apartment building there are a lot of wifi signals as expected in a normal apartment building.

But only my wifi is wpa3. Most use wpa2.
There are also some still using WEP!?

Almost half of the SSID is obviously the manufacturer standard wifi names, on these routers I simply guess they also use the standard password.

There are also some web cams with more or less manufacturers name in the SSID…

And everyone drive the tx power to max so the ssid is visible faaaar away, instead of setting the tx power so the wifi signal stop just outside the wall.

8

Per @dave14305 's comments, it seems to me that LPE vulnerabilities are rarely a concern on OpenWrt which is typically used as a single-user (root only) environment.

With that in mind, a useful 'filter' for this type of exploit is:

  • Is OpenWrt vulnerable to unathenticated attacks
  • For the (relatively small) population of setups that are actually multi-user, does a given vulnerability apply
  • Are any other services (say SMB, etc.) that service multiple users implicated in potential privilege escalations.