Avast Alert.... Open port 7547

[REDACTED]

As I stated in my original reply, You have a right to demand a secure router from your ISP.
It is still up to you to do so. It is your information and your responsibility to keep it safe.
You need to pursue this.
Avast advised you of the vulnerability it is now up to you to fix the problem. What ever that may entail.

Yeah, I already know this and that's why I've turned to this forum for assistant.

 Plusnet are dismissing my concerns, claiming my router isn't affected and haven't provided an answer as to why Avast has identified port 7547 as open and a Security Risk.

I guess Plusnet are attempting to imply Avast has identified a false Alert.

[mchain]

Since you've entered a legal binding agreement with PlusNet for their services, it is time to read the fine print in their/your contract.  Somewhere in there there should be a section about your router or router(s), and what your options/legal rights are. 

With this issue, I wouldn't assume anything. 

All Avast did was let you know there was an issue with a vulnerability dating back to 2005.  With a vulnerability this old, not likely at all this is a false positive, especially given the fact that firmware updating for this vulnerability has been lax at best.

[REDACTED]

All Avast did was let you know there was an issue with a vulnerability dating back to 2005.  With a vulnerability this old, not likely at all this is a false positive, especially given the fact that firmware updating for this vulnerability has been lax at best.

Surely a Security Issue dating back to 2005 shouldn't be apparent on router supplied roughly 2 months ago and 13 years later ?

However, I'm not accusing Avast of anything, I only posted on this forum as I believe other Avast users may of encountered the same issue.

Although the Alert identifies the router has having an open port, it's my believe the issue lies within the broadband internet connection, otherwise would a replacement router resolve the issue ?

[mchain]

You can try GRC web port scanner here:  https://www.grc.com/x/ne.dll?bh0bkyd2

Click Proceed to go to the next page.  You'll need to manually enter your custom port number for scan results; the router UPnP scan is also useful.

My port shows as stealth.

[REDACTED]

You can try GRC web port scanner here:  https://www.grc.com/x/ne.dll?bh0bkyd2

Click Proceed to go to the next page.  You'll need to manually enter your custom port number for scan results; the router UPnP scan is also useful.

My port shows as stealth.

I assume I used the link provided correctly; after proceeding to the next page, I entered 7547 and selected  "  User Specified Custom Port Probe ' only to receive a FAIL

Stating: 7547 OPEN Unknown Protocol for this port

[mchain]

You can try GRC web port scanner here:  https://www.grc.com/x/ne.dll?bh0bkyd2

Click Proceed to go to the next page.  You'll need to manually enter your custom port number for scan results; the router UPnP scan is also useful.

My port shows as stealth.

I assume I used the link provided correctly; after proceeding to the next page, I entered 7547 and selected  "  User Specified Custom Port Probe ' only to receive a FAIL

Stating: 7547 OPEN Unknown Protocol for this port

Did you open the TEXT box for more information?  What did the UPnP scan show?

A FAIL would confirrm your vulnerability issue via a third-party and presumably unbiased website.  FAIL means the port is open and did respond to GRC's server port probe.

• PORT is open and visible to the entire internet.
• PORT is closed and does not respond to port probe.
• PORT is stealth and hidden from public view.

The last condition would be the one you would want to see.  Your router would, for all purposes, not exist and could not be hacked.

Unless PlusNet agrees to fix your vulnerability, there is not much you can do short of replacing the modem/router with a device that is not vulnerable.

[bob3160]

You can try GRC web port scanner here:  https://www.grc.com/x/ne.dll?bh0bkyd2

Click Proceed to go to the next page.  You'll need to manually enter your custom port number for scan results; the router UPnP scan is also useful.

My port shows as stealth.

I assume I used the link provided correctly; after proceeding to the next page, I entered 7547 and selected  "  User Specified Custom Port Probe ' only to receive a FAIL

Stating: 7547 OPEN Unknown Protocol for this port

Did you open the TEXT box for more information?  What did the UPnP scan show?

A FAIL would confrrm your vulnerability issue via a third-party and presumably unbiased website.  FAIL means the port is open and did respond to GRC's server port probe.

• PORT is open and visible to the entire internet.
• PORT is closed and does not respond to port probe.
• PORT is stealth and hidden from public view.

The last condition would be the one you would want to see.  Your router would, for all purposes, not exist and could not be hacked.

Unless PlusNet agrees to fix your vulnerability, there is not much you can do short of replacing the modem/router with a device that is not vulnerable.

Or, taking them to court. You could also change ISP's if there is an alternate.
GRC simply confirmed what the Avast scan already revealed. That should be sufficient proof to present to your ISP and get them to replace your router.
Good luck.

[REDACTED]

Did you open the TEXT box for more information?  What did the UPnP scan show?

The Text Box says:
Results from probe of port: 7547

    1 Ports Open
    0 Ports Closed
    0 Ports Stealth
---------------------
    1 Ports Tested

THE PORT tested was found to be: OPEN.

TruStealth: FAILED - NOT all tested ports were STEALTH,
                   - NO unsolicited packets were received,
                   - NO Ping reply (ICMP Echo) was received.


The UPnP scan says:
The equipment at the selected IP address
DID NOT RESPOND TO OUR UPnP PROBES

[REDACTED]

A response from Plusnet:

We've previously confirmed the reason for this port and why it's in an open state. Any security issues with this port being open where resolved when we last updated the firmware on these ports.


Plusnet have not previously confirmed the reason for this port and why it's in a open state, nor have they answered why Avast has identified open port 7547 as an Security Alert if the security issue was resolved when the firmware was last updated.


Plusnet response continues:

In order for anyone to gain access to the router and the traffic it controls, they would need to know the serial number for the router. Each of these is unique and on the router. Anyone concerned with hacking it, would need to physically get this from the router.

To make your home network more secure, it's recommended to change the name and password for these.

You can log in to the router settings and close the port if you want to do this. You'll also be able change the settings for your wireless network on here.
Plusnet don't support or recommend changing the port settings on the router. You can change the setting s for these under 'advanced settings'.


When I attempted to initiate port fowarding or close the port, the options are either blanked out or nothing happens, I can't remember which; when I enquired with Plusnet they said port forwarding isnt available on my router and the port can not be closed only fowarded ?

[bob3160]

Again, I don't understand what you expect from us or Avast.
The discrepancy is strictly between you and your ISP provider.
If you're happy with your ISP's explanation, simply disregard the report from both Avast and GRC.
It's your security.

[REDACTED]

Again, I don't understand what you expect from us or Avast.
The discrepancy is strictly between you and your ISP provider.
If you're happy with your ISP's explanation, simply disregard the report from both Avast and GRC.
It's your security.

.

What is expected from you bob3160;  is to STOP replying to my post if you cant offer any help.

It appears that forum members who read my post and are unable to help or offer an opinion, remain silent and don't reply just for the sake of it.

 Yes, it is my security but we obviously have differing opinions and expectations.

 I pay plusnet to provide a service, which should be safe, secure and not compromise my privacy.

A Bank is an establishment that holds my money; and although it's my money, I don't expect the vaults to be open for anyone to access.

[bob3160]

Again, I don't understand what you expect from us or Avast.
The discrepancy is strictly between you and your ISP provider.
If you're happy with your ISP's explanation, simply disregard the report from both Avast and GRC.
It's your security.

.

What is expected from you bob3160;  is to STOP replying to my post if you cant offer any help.

It appears that forum members who read my post and are unable to help or offer an opinion, remain silent and don't reply just for the sake of it.

 Yes, it is my security but we obviously have differing opinions and expectations.

 I pay plusnet to provide a service, which should be safe, secure and not compromise my privacy.

A Bank is an establishment that holds my money; and although it's my money, I don't expect the vaults to be open for anyone to access.

If your bank keeps the vault open, you expect it to close it to keep you safe. Your ISP is keeping a port open on an unsecured router.
Get your ISP to close that port or replace your router. It's that simple.
Telling me not to reply because you don't like the answer makes no sense. Asking Avast to fix what it discovered your ISP broke also makes no sense.

[REDACTED]

Again, I don't understand what you expect from us or Avast.
The discrepancy is strictly between you and your ISP provider.
If you're happy with your ISP's explanation, simply disregard the report from both Avast and GRC.
It's your security.

.

What is expected from you bob3160;  is to STOP replying to my post if you cant offer any help.

It appears that forum members who read my post and are unable to help or offer an opinion, remain silent and don't reply just for the sake of it.

 Yes, it is my security but we obviously have differing opinions and expectations.

 I pay plusnet to provide a service, which should be safe, secure and not compromise my privacy.

A Bank is an establishment that holds my money; and although it's my money, I don't expect the vaults to be open for anyone to access.

If your bank keeps the vault open, you expect it to close it to keep you safe. Your ISP is keeping a port open on an unsecured router.
Get your ISP to close that port or replace your router. It's that simple.
Telling me not to reply because you don't like the answer makes no sense. Asking Avast to fix what it discovered your ISP broke also makes no sense.

I'm not asking you (bob3160) or Avast to fix my router.
 
bob3160, I asked you not to reply (which you couldn't resist but reply, even when asked not to) but not because I don't like your answer but because you're not helping.

You only see your own blinkered view of the situation.

I've recently entered a contract with Plusnet and I can't just end it as flippantly as you believe I can.

In the UK, Plusnet are offering the best value Broadband Only package and if the situation can be resolved then it's worth my while to remain with Plusnet; otherwise, if Plusnet are insistent the open port is necessary and not a security risk, than maybe I'll be able to use the open port/Avast Alert and GRC Report as a reason to end my Plusnet contract early.

If this was as easy as just buying a new router, then why are Plusnet being so awkward.

I'm not happy with the port being open, I'm not happy with the explanation given by Plusnet.


I've only posted on this forum as it was Avast that provided the open port Alert and due to the response from Plusnet, I thought other forum members and users of Avast may of encountered the same situation, either with Plusnet or different ISPs and could share their experiences and, whether or how the situation was finally resolved.

However, bob3160, I and anyone following this thread are all too aware of your opinion and you're not helping; you're just stating the obvious, which isn't helping, therefore, please don't reply to this post just for the sake of it.

[REDACTED]

 My sageMcom F@st  5260 router from spectrum also shows port  7547 open .

[REDACTED]

 And it also shows DNS port 53 ... in my router settings looks like this router can do a lot of changes I must be careful with. Everything acronym wise  from The two threads about this open ports 7547.   I think can be changed with this router way more advanced than the Ubee  I had before it. This port should be easy to fix just wish someone could show a fix .David what did you eventually do?