Your hotel’s Wi-Fi network may contain significant security holes

Share This Post

Malls, hotels, convention centers at risk
In total, the researcher found five vulnerabilities he believes could compromise the gateway and put users and their endpoints at risk. Reaching out to Airangel for comment, the company allegedly told Mohsin the device was discontinued in 2018 and is no longer supported – meaning the bugs still haven`t been fixed. According to Mohsin, the device is still “widely used” in hotels, shopping malls and convention centers around the world, with web scans showing at least 600 accessible devices.

An internet gateway that many hotels use to provide their guests with Wi-Fi connectivity is flawed to the point where a malicious actor could exfiltrate sensitive and personally identifiable data on them, researchers have claimed. Etizaz Mohsin discovered that the gateway, called Airangel HSMX Gateway, contains hardcoded passwords that were “extremely easy to guess”. With these passwords, a malicious actor could access the gateway`s database with all the data on the people using the network, including the guest`s name, room number, and email address and possibly also be able to redirect users to other websites.

Highlights

  • Pay for Services, Use Social Media Accounts, or Access Business Email. To stay safe while browsing, we recommend that users use a virtual private network (VPN). This is to hide the user’s girlfriend’s IP address and encrypt the connection, making online actions essentially untraceable and more secure.

  • The final figure could be even higher, as the majority of the hotels at risk are in the UK, Germany, Russia and the Middle East. “Given the level of access that this suite of vulnerabilities provides an attacker, there seems to be no limit to what an attacker can do,” he said. Public WiFi networks in hotels, coffee shops, libraries, airports, etc. are generally considered a security risk. Cybersecurity researchers have warned for years that we should refrain from certain things while connected to these networks.

Read More:

Partnership Between Mitsubishi Electric and Nozomi Networks Strengthens Operational Technology Security Business

Mitsubishi Electric and Nozomi Networks Partnership Mitsubishi Electric and Nozomi...

Solidion Technology Inc. Completes $3.85 Million Private Placement Transaction

**Summary:** 1. Solidion TechnologyInc. has announced a private placement deal...

Analyzing the Effects of the EU’s AI Act on Tech Companies in the UK

Breaking Down the Impact of the EU’s AI Act...

Tech in Agriculture: Roundtable Discusses Innovations on the Ranch

Summary of Tech on the Ranch Roundtable Discussion: ...

Are SMEs Prioritizing Tech Investments Over Security Measures?

SMEs Dive Into Tech Investments, But Are...

Spotify Introduces Music Videos for Premium Members in Chosen Markets

3 Summaries of Spotify Unveils Music Videos for Premium...

Shearwater to Monitor Production at Equinor’s Two Oil Platforms

Shearwater GeoServices secures 4D monitoring projects from Equinor for...

Regaining Europe’s Competitive Edge in Innovation: Addressing the Innovation Lag

Europe’s Innovation Lag: How Can We Regain Our Competitive...

Related Posts

Government Warns of AI-Generated Content: Learn More about the Issue

Government issued an advisory on AI-generated content. All AI-generated content...

Africa Faces Internet Crisis: Extensive Outage Expected to Last for Months, Hardest-Hit Nations Identified

Africa’s Internet Crisis: Massive Outage Could Last Months, These...

FTC Investigates Reddit for AI Content Licensing Practices

FTC is investigating Reddit's plans...

Journalists Criticize AI Hype in Media

Summary Journalists are contributing to the hype and...