{"id":1007,"date":"2021-09-22T14:59:11","date_gmt":"2021-09-22T14:59:11","guid":{"rendered":"https:\/\/www.practicallynetworked.com\/?page_id=1007"},"modified":"2021-10-05T16:59:20","modified_gmt":"2021-10-05T16:59:20","slug":"amit-routers-login","status":"publish","type":"post","link":"https:\/\/www.practicallynetworked.com\/amit-routers-login\/","title":{"rendered":"AMIT- Based Routers &#8211; Visible Password"},"content":{"rendered":"<p>Routers OEM&#8217;d from AMIT have a security flaw that allows the admin page password to be viewed.\u00a0 Details follow:<\/p>\n<p><b>Requirements:<\/b><\/p>\n<ul>\n<li>\n<p align=\"left\">Internet Explorer 5.0 or above<\/p>\n<\/li>\n<li>\n<p align=\"left\">Access to the History folder on the computer that IE is run from<\/p>\n<\/li>\n<\/ul>\n<p><b>How to View:<br \/>\n<\/b>Log into the router, and hold the cursor over the URL in the history file that starts with\u00a0<b>&#8220;logi?RC=&#8221;<\/b>.\u00a0 The &#8220;tooltip&#8221; data contains the login password right after\u00a0<b>&#8220;&amp;URL=&#8221;<\/b>. (See the screen shot below)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-1008\" src=\"https:\/\/www.practicallynetworked.com\/wp-content\/uploads\/2021\/09\/amin_login.gif\" alt=\"\" width=\"650\" height=\"529\" \/><\/p>\n<p align=\"center\">\n<p><b>NOTES:<\/b><\/p>\n<p>&#8211; The password could not be viewed via the Netscape 4.7 History, or by viewing files in the browser cache.<\/p>\n<p>&#8211;\u00a0<b>Any AMIT-based router that has a framed interface and that uses a web page form field for password entry will have the problem<\/b>. The problem has been confirmed on the following products:<\/p>\n<ul>\n<li>\n<p align=\"left\">SMC7004AWBR wireless<\/p>\n<\/li>\n<li>\n<p align=\"left\">SMC7008<\/p>\n<\/li>\n<li>\n<p align=\"left\">DLink DI-713P<\/p>\n<\/li>\n<\/ul>\n<p>&#8211; It&#8217;s been confirmed that an SMC7004ABR (non AMIT) and Linksys BEFSR41\u00a0<b>DO NOT have the problem.<\/b>\u00a0 (They use pop-up NT style login challenge boxes for login).<\/p>\n<p align=\"left\"><b>Work-Around:<br \/>\nClearing the IE History<\/b>\u00a0(Internet Options Control Panel &gt; General Tab) after a router Admin session removes the password information.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Routers OEM&#8217;d from AMIT have a security flaw that allows the admin page password to be viewed.\u00a0 Details follow: Requirements: Internet Explorer 5.0 or above Access to the History folder on the computer that IE is run from How to View: Log into the router, and hold the cursor over the URL in the history file that starts with\u00a0&#8220;logi?RC=&#8221;.\u00a0 The &#8220;tooltip&#8221; data contains the login password right after\u00a0&#8220;&amp;URL=&#8221;. (See the screen shot below) NOTES: &#8211; The password could not be viewed via the Netscape 4.7 History, or by viewing files in the browser cache. &#8211;\u00a0Any AMIT-based router that has a <\/p>\n","protected":false},"author":2,"featured_media":5596,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/1007"}],"collection":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/comments?post=1007"}],"version-history":[{"count":0,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/1007\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media\/5596"}],"wp:attachment":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media?parent=1007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/categories?post=1007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/tags?post=1007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}