Sprint Overdrive Security Vulnerability
I'm a huge fan of my Overdrive mobile router, and will be even more so after all the travel I have planned for the next 2 months. In the process of writing an iPhone app to manage the device, I discovered a critical security vulnerability in all firmware versions prior to 1.07
The previous firmware versions didn't require a login to perform administrative functions at the server level. This means that anyone connected to your wifi network could have total control of the device, up to and including locking the owner out.
I'm happy to say that Sprint and Sierra Wireless' engineers have fixed the problem in firmware version 1.07, so make sure your Overdrive has been updated.
You can do so via the built-in admin interface (usually found at http://192.168.0.1) and the new firmware can be downloaded here.
Comments (0)
Add a Comment