Today I found that anyone can access my router from outside my lan using my public ip. Then after some study, I came to know that the problem was not only with my router but it is a bsnl vulnerabilities, and most of bsnl routers can be access by its public ip (by simply entering public ip in url bar).
Now my question is:
if anyone have been able to access my admin panel(brute force username and password or if i leave delult username and password or whatever any other method) what further attack can be done by an attacker
Is it possible for an attacker that he/she can access my connected devices
he/she can able to land me on a malicious page by dns spoofing.