Is it possible to change the admin user/password remotely on a router without logging in? If yes, how so?
closed as off-topic by schroeder♦ Nov 13 '17 at 14:55
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "This question does not appear to be about Information security within the scope defined in the help center." – schroeder
This depends on which router you try it on. You can't expect an exploit or security hole to work on all routers. So by exploiting a design flaw or something similar you could certainly change a router's password.
However, most vendors would try to patch something like this asap.
For example, searching osvdb.org for ZyXEL produces a long list of exploits. Check it out here
Most routers use a HTTP Basic authentication scheme.
To access any page, including the change password, the credentials would need to be sent in header.
So, you dont need to "Log In", but you would need to send your credentials. Does that count?