O2 Wireless Box Security Update Email

[Deleted User]

Anyone else had an email from O2 Broadband this morning advising that they have changed the password on your Wireless Box due to a security problem they have been made aware of?

Contents of the email I received:

Dear LeeUK,

We’ve been told about a security problem that could affect your O2 Wireless Box.



The problem could let people change your router settings, which could change how it works.



What we'll do

We’ll set up a password automatically to protect the settings on your O2 Wireless Box. You don’t need to call us to do anything. You’ll only need it if you want to change the settings. (In most cases, you’ll probably never need it.)



The password will be the 11 digit alphanumeric serial number on the bottom of the O2 Wireless Box. The serial number has an “SN “in front of it e.g. “CP0749JTAM3” and a 2 digit code in brackets after it. Here’s how to change it (If you would like to)

Nothing else changes

We won’t change any other settings on your O2 Wireless Box. (The password you use to connect wirelessly to your O2 Wireless Box will stay the same.)

We apologise for the inconvenience, and we’ll do everything we can to keep the disruption to a minimum.

Kind regards,

O2 Broadband Team

I wondered why I couldn't access it last night as it was asking for a username and password to login when usually it doesn't.

jaydeeuk1

Yup, got the email.

Is this bug to do with the fact a hacker can fake an ip address to come from the local network, and use the default password to access your router?

Obv. they've changed the password now to make it unique and far harder to crack, but did they also tackle the problem?

[Deleted User]

I have no idea if they have tackled the problem or just changed the passwords. Also with access to your router an attacker could see and use your WEP/WPA keys.

Donnie

I changed mine as soon as I received it.

Woby_Tide

I just didn't use their router fullstop. Having had to use it temporarily for the last few days and having this forced change I then found the change didn't work as there is some sort of issue with the way the password pop-up works in IE7/8. I'm back using alternative routers for the forseeable future

[Deleted User]

Woby_Tide wrote: »

I just didn't use their router fullstop. Having had to use it temporarily for the last few days and having this forced change I then found the change didn't work as there is some sort of issue with the way the password pop-up works in IE7/8. I'm back using alternative routers for the forseeable future

I did carry on using my own-bought router when I switched to O2 but after a couple of months it crashed and never worked since so started using the O2 supplied router.

Donnie

Woby_Tide wrote: »

I just didn't use their router fullstop. Having had to use it temporarily for the last few days and having this forced change I then found the change didn't work as there is some sort of issue with the way the password pop-up works in IE7/8. I'm back using alternative routers for the forseeable future

Had no problem with the password box with IE7, nor IE8.