By default, many Belkin 54G wireless routers using a default ssid of "belkin54g" are preconfigured with a default password. The "admin" account has a null password which is publicly known and documented. This allows attackers to trivially access the program or system as the routers come preconfigured with remote telnet access enabled.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Solution:
Change Default Setting
Exploit:
Exploit Public
Solution
Currently, there are no known upgrades or patches to correct this vulnerability. It is possible to temporarily work around the flaw by implementing the following workaround: Ensure that the username and password for the router are immediately changed, and disable remote telnet access.
Thank you google for making 18293 the most popular vulnerability, week by week, on all of OSVDB. Clearly a lot of people are looking for their router password.
