http://www.wired.com/images_blogs/threatlevel/2009/10/embeddeddevice-scan-raid09.pdf
“Vulnerable devices can be found in significant numbers in all parts of the world covered by our scan,†(.pdf) the researchers wrote in a summary of their initial findings presented at a symposium in June. “The double digit vulnerability rates suggest that a large botnet can be created by constituting only embedded network devices.â€
Linksys routers had the highest percent of vulnerable devices found in the United States — 45 percent of 2,729 routers that were publicly accessible still had a default password in place. Polycom VoIP units came in second, with default passwords lingering on about 29 percent of 585 devices accessible over the internet.
“You can reflash the firmware or install any software you wish on vulnerable devices,†said Salvatore Stolfo, a Columbia University computer science professor who is overseeing the research project aimed at uncovering vulnerable appliances on the internet. “These devices will be owned and used by bot herders and other miscreants.â€
Hackers can use vulnerable routers to conduct click fraud or DNS cache poisoning attacks or to launch attacks on other systems. (See our recent Threat Level story about vulnerable routers used by Time Warner customers.) Someone with remote access to the administrative interface of a VoIP system would also be able to install firmware to record conversations.
Â
