Wi-Fi Inspector Says my brand new router has a high risk issue!

[ramoynihan]

Hi Folks,

"WiFi inspector" reports the same issue with my Linksys router, and I checked that it has the latest firmware but still uses version 2.55 of dnsmasq.

Question: does this apply only to the WiFi performance of the router itself, or does it affect the whole LAN? I don't use the wireless capabilities of the Linksys router and I use a Ubiquiti WAP instead (which gets a green checkmark from 'inspector'). But even with the WiFi features of the router disabled it reports the router as being a security problem.

Not sure if I should feel comfortable or not.

Thanks.

[rocksteady]

I think many routers are being found at risk of this vulnerability, but manufacturers don't seem too bothered about it.
If you have a Linksys router you could always take a look on their community forum to seek assistance:
https://community.linksys.com
 

[chris..]

Hello,

All versions prior to 2.78 are vulnerable.

Has there been any change on the avast side?

Many people who had the problem before the last update no longer have it now.
However,their router has not been updated,  the detected version of dnsmasq is still  "dnsmasq-2.55"
I would like to point out that the wifi-inspector scan was done by mentioning "Home" network , because in "Public" network (selected), avast had not detected for several months now, which is normal when we know that the vulnerability is positioned on the LAN and not the WAN.
nb:This is an observation of several (Belgian) users and not mine, because my router was updated at the end of the year with dnsmasq 2.78

[Asyn]

Hi Chris, are these guys using a VPN..?

[chris..]

I don't think so (at least for one of them, but I'm still going to ask for confirmation).
On the other hand, what is certain is that their test was done manually with the cmd command on their own router (192.168.1.1) , I don't think using a VPN can fake the answer on locally server IP
#15 ramoynihan post was january 28th before avast last update , it would be nice to know what about now ?

[Asyn]

I don't think so (at least for one of them, but I'm still going to ask for confirmation).

OK, let me know. I've seen on some user systems that a VPN can prevent this WFI detection.

[chris..]

Hi Chris, are these guys using a VPN..?

Have you to know if they usually use a VPN (disabled at the time of testing) or if it is enabled at the time of testing?

[Asyn]

Hi Chris, are these guys using a VPN..?

Have you to know if they usually use a VPN (disabled at the time of testing) or if it is enabled at the time of testing?

Let's put it this way, does it make a difference if their VPN (if any) is disabled during WFI-Scan..?

[chris..]

yes , does it make ?

[Asyn]

yes , does it make ?

Sorry, not sure what you mean.

[chris..]

#18 & #20 you want to know if they use VPN
#21 I would like clarification on what you call "using a VPN" ---> enabled or disabled during Wifi scanning ?
#22 it seems you haven't quite understood and ask me if I wanted to know ("Let's put it this way") if "does it make a difference if their VPN (if any) is disabled during WFI-Scan..?"
So #23 I confirm that my question #21 is the same of your #22 :yes, "does it make? ...... a difference if their VPN (if any) is disabled during WFI-Scan..?" ---> yes or no ?

[Asyn]

Well, please ask the users you mentioned in Reply #17 and report back. Cheers