1

I have a Linksys WAP54G v1 device that I want to use to create a second WiFi network.

The device is configured for WPA2-Personal, AES encryption with a random 64 character paraphrase. The firmware is version 3.04 (circa 2009).

What is the risk in using an older device with older firmware if the encryption WPA2 is known to be "good"?

Thanks

4
  • Do you mean random 63 characters ? stackoverflow.com/questions/18006390/…
    – KDEx
    Feb 20, 2016 at 4:46
  • Will the access point also be your firewall? Feb 20, 2016 at 5:40
  • Yes, that's correct 63 character password. I noticed that after posting that the device won't take 64 characters in the password field.
    – Rick
    Feb 20, 2016 at 14:11
  • This device does not have any firewall capabilities. I would have to add another device upstream if I wanted firewall functionality.
    – Rick
    Feb 20, 2016 at 14:12

1 Answer 1

1

The Linksys WAP54G has two listed CVE security vulnerabilities that are rated 10/10 in severity.

CVE-2010-1573 and CVE-2010-2261.

The details say that versions 3.04.03 and earlier are vulnerable to both.

In the case of CVE-2010-2261, the presence of hardcoded credentials would allow any attacker able to send and receive web traffic to access dedicated debug web pages that give a root shell.

As for CVE-2010-1573, the presence of hardcoded credentials allow any remote attacker to access the router, escalate privileges, and gain complete control.

2
  • Thanks for the detailed answer. I'm astounded that CVE-2010-157 allows an unauthenticated attacker unauthorized access to the device. Thanks for the input, I'll look for a new access point.
    – Rick
    Feb 20, 2016 at 14:09
  • @Rick Another thing to check: Is this one of the models that couldn't properly disable WPS? I know a lot of Linksys firmwares were pretty bad about that, when the WPS vulnerabilities were disclosed.
    – Iszi
    Mar 4, 2016 at 0:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.