Re: Westell wirespeed modem

From: Sherwyn Williams (sherwill22@tmail.com)
Date: Mon May 30 2005 - 15:23:51 EDT


It is PPPoE, I got on router I can see the external ip, but after a nmap
scan it is secure tight . And to see the other configurations of the
router I need the pass and username. I have a version of whoppix so I
am going to try the metasploit and see what happen.

On Mon, 30 May 2005 12:57, Erin Carroll wrote:
> I believe the Westell Wirespeed is a Globespan chipset based device.
> The default username/password for the Westell Wirespeed is username:
> admin password: password but this is a common combo for default
> settings on various wireless devices. Hopefully the default password
> was changed :)
>
> Though a quick google search didn't find any obvious exploits bear in
> mind that the Westell uses PPPoE for admin connections by default (this
> can be changed). Though I was unable to pick up any specific
> information on what PPPoE code is incorporated into the Westell
> firmware there are exploits possible in certain PPPoE packages that the
> device may be vulnerable to. Your best bet aside from the usual
> misconfiguration/open port testing might be to test against the PPPoE
> stack with Metasploit or similar tools.
>
> HTH,
>
> Erin Carroll
>
>
> Sherwyn Williams <sherwill22@tmail.com> wrote ..
>> Hey all,
>> I was doing some testing and I can accross a westell wirespeed
>> wireless router, do anyone know of any default passwords for this type
>> of wireless device, or any secuirty faults that are build into westell
>> routers?
>> Sherwyn Williams
>> Technical Consultant
>> (917) 650-5139
>> Sherwill22@tmail.com
Sherwyn Williams
Technical Consultant
(917) 650-5139
Sherwill22@tmail.com



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:22 EDT