Security & privacy concerns with Syrotech ONU on BSNL FTTH | TR069 | CWMP | BACKDOOR | PWD Register

[shashankb]

But I guess the data should not be a part of ONT if it is under Bridge mode with another router right ?

 

[hemant]

it adds security, but i think router can still be accessed from your local network with some private ip like 192.168 or 172.16 etc. so there are still attack vectors - with csrf from browsers (mitigated a bit by having custom ips for router lan interfaces) , malware on local net devices etc

 

[maverick27]

Yeah and also ironic that they are injecting popups and redirects to malware websites!

I almost forgot about that!