Your question isn't the easiest to understand, but I take it you're concerned about the security of the router admin pages on your device. There are ways of compromising the security of HTTPS connections, such as performing MITM attacks (made much easier by manufacturer's tendencies to use self-signed certificates).
However, this is rarely the easiest way of getting in. Recently Netgear, one of the largest router manufacturers, revealed a serious security weakness in the software of some of its products, that can be exploited without even being connected to the network in question. Essentially the attack revolves around a piece of software running on the router that does not correctly verify its input (your credentials/the action). You can read about that here: http://www.computerworld.com/article/3149555/security/an-unpatched-vulnerability-exposes-netgear-routers-to-hacking.html
If you're dead-serious about protecting it, then the best way of doing this is to turn off the web interface. Failing that the next best thing to do is to use network segregation to control from where on your network the configuration services can be accessed. I do this with a Cisco access point; the wireless users join a different VLAN than the configuration service, and the router refuses to route between the management VLAN and the wireless VLAN, thus preventing them from getting at the configuration portal without using some form of jump-box. This, however, is not a feature available on most consumer-grade routers that I have encountered.