Accessibility Resource Center Skip to main content
Get it fast with In-Store & Curbside Pickup or same day delivery.

Security Flaw with Subaccount

Reply
sharpie958
Copper Contributor
Copper Contributor
Posts: 6
Registered: ‎03-22-2010

Security Flaw with Subaccount

Message 1 of 4
(1,197 Views)

Can someone please verify this for me.  I just logged into a subaccount and was 1. able to see the wifi settings of my router including the password 2. able to CHANGE the wifi settings.

 

After I log into a subaccount, I am here:

 

https://www.verizon.com/foryourhome/myaccount/ngen/pr/home/myverizon.aspx

 

I click on "Get Wi-fi Details" and bam... the default router name and password is retrieved.  I can then proceed to change the name and wifi security settings... save them...

 

Please tell me this isn't by design...

3 REPLIES 3
hlppls
Silver Contributor I
Silver Contributor I
Posts: 395
Registered: ‎11-09-2013

Re: Security Flaw with Subaccount

Message 2 of 4
(1,150 Views)

Dont be to shocked. This is information that anyone in your house can retrieve without a username and password assigned by  you.

viafax999
Gold Contributor VII Gold Contributor VII
Gold Contributor VII
Posts: 2,159
Registered: ‎11-10-2009

Re: Security Flaw with Subaccount

Message 3 of 4
(1,130 Views)

@sharpie958 wrote:

Can someone please verify this for me.  I just logged into a subaccount and was 1. able to see the wifi settings of my router including the password 2. able to CHANGE the wifi settings.

 

After I log into a subaccount, I am here:

 

https://www.verizon.com/foryourhome/myaccount/ngen/pr/home/myverizon.aspx

 

I click on "Get Wi-fi Details" and bam... the default router name and password is retrieved.  I can then proceed to change the name and wifi security settings... save them...

 

Please tell me this isn't by design...


I belive it's by design.

You can only access that info if you have the security credentials to access your account.  I think the purpose is so that if you forget the router wifi credentials support can tell you what they are or alternatively you can log on to your account and change the wifi password yourself.

In either case it's only the wifi password and doesn't allow access to the router main settings so is sort of trivial.

 

the_madscanner
Silver Contributor II
Silver Contributor II
Posts: 334
Registered: ‎04-24-2014

Re: Security Flaw with Subaccount REPORT IT?

Message 4 of 4
(1,110 Views)

if you are reading this on a pc, you may have the option at the bottom of this page, under 

Support Tools

to report a security vulnerability....i hope they plug this hole, as i can see how maybe you wouldn't want a subaccount holder to be able to add devices to ur network or change your wi-fi password( and then forget to tell you or forget new password causing you to reset  modem/router back to default settings so you can regain access  pitr!

How-To Videos
 
The following videos were produced by users like you!
   
Videos are subject to the Verizon Fios Community Terms of Service and User Guidelines and contains content that is not created by Verizon.
Have a spare Fios-G1100?Learn how to bridge it into your network
Get Started


Covid19

Browse Categories
Categories:
Posts

Verizon Troubleshooters
Unable to find your answer here? Try searching Verizon Troubleshooters for more options.
Modal Dialogue Title