Cisco has issued a concern about the vulnerabilities in its CVR100W Wireless-N VPN router. The connection over a VPN is secure and any third-party can’t invade the same. But, Cisco has found a vulnerability in its RV110W Wireless-N VPN Firewall, RV215W Wireless-N VPN Router and CVR100W Wireless-N VPN Router. Cisco warns its users that the third-party attackers can encroach upon the VPN. The hackers can even gain administrative access to the affected devices.
Plug And Play Problem
CVR100W Wireless-N VPN router’s vulnerability is because of the incomplete range checks of the UPnP (Universal plug and play) input data. An attacker can take advantage of this vulnerability. Therefore, he can send a malicious code to the UPnP listening port of the targeted device.
VPN And VPN Router
A VPN is basically a network that lets you add safety and privacy to private and public networks. VPNs are more useful in corporate offices to safeguard the sensitive data. On the other hand, a VPN router is a routing device that enables users to connect over a VPN. In offices, it is a VPN that helps employees share data and information over the VPN to the other computers connected to it.
- is portable.
- is compatible with any type of internet enabled device.
- can connect through a wireless network or with wired LAN or serial interfaces.
- efficiently manages communications within VPN tunnels by using one or more networking/tunneling protocols
- permits the core packet routing and network communication services within a VPN.
- offers the ability to share and offer connectivity of the VPN to different end devices.
The VPN router is one of the important devices for many computer users. It holds a very important place as it connects your computer devices together and also helps connect with the outside world. If you ignore the safety of a VPN router, you are putting your safety for a toss.
Today, many VPN routers available in the market come with an insecure default configuration and other flaws. As a result, consumers cannot fix these problems at their level. However, some small steps can help you avoid the vulnerabilities.
- Routers supplied by ISPs are less secure: Routers supplied by ISPs have hard-coded remote support credentials. And a user cannot change these details. Hence, they are less secure compared to those sold by manufacturers to consumers.
- Keep updating the admin password: Most of the routers have a default administrator password. And hackers always try to use these publicly known credentials. So, make sure to change the default administrator password for better security.
- Restrict which IP address can manage the router inside the LAN: It’s always good to allow access from a single IP address that is not included in the pool of IP addresses allotted to computers through DHCP (Dynamic Host Configuration Protocol).
- Switch on HTTPS access to the router interface: If you are working with the router, always try to use the browser in incognito or private mode. This helps in wiping out session cookies and doesn’t let the browser to remember the router’s username and password.
- Disable Wi-Fi Protected Setup: it’s recommended to simply turn off the WPS, also known as Wi-Fi Protected Setup. As an alternative, the customer can connect to the router through a wired connection and access its web-based management interface.
- Use a VPN from Le VPN: to always protect your security and privacy in all your devices. Le VPN offers the best VPN routers protection. Find out all its benefits.
Le VPN Summer Special
Get Le VPN 2-year plan for $69.60 or $2.90/month