MSFT and Asus Router Exploit
Asus Router Exploited
MSFT, the stock symbol for Microsoft, has been spotted on Asus routers using several gigabytes of data. Similar routers may also display the "Bayi client Fully qualified domain name clients full" option. Some PCs have been reported to change their names to "MSFT 5 0" on their own, with attempts to change it back proving unsuccessful. The Asus router in question was flashed with Merlin firmware, which has been found to have DNS probing capabilities.
DNS Probing Vulnerability
The exploit appears to be a problem with the Asus router itself, not the firmware. There is no configuration option in the Asus web interface, but telnetting into the router reveals the vulnerability. To check the information of connected devices, use the following command:
telnet 192.168.1.1 asusinfo 
Comments