Thomson TG585 security issue
http://www.theregister.co.uk/2009/09/01/buggy_o2_routers/
"The flaw resides in two custom-built devices O2 gets from router manufacturer Thomson. Both the TG585n, and the TG585, known respectively as the O2 Wireless Box III and the O2 Wireless Box II, suffer from the bug. Subscribers of other ISPs that use the device are also likely to be exposed to the same threat."
It looks like it relies on the fact that most people leave the Internal IP address (192.168.1.254) of the router as the default, and that often the user and password are left as blanks.
If you wish to change it, and delete the old default IP do the following:
Go to the Home Network menu
Click on Interfaces
Click on Local Network where it appears in the main "Window"
Click on Configure
You can then add,change and delete the IP addresses associated with your router on your local network.
If you wish to change the user ID/Password you use to login to the Web Interface its located on the Toolbox menu under User Management.
"The flaw resides in two custom-built devices O2 gets from router manufacturer Thomson. Both the TG585n, and the TG585, known respectively as the O2 Wireless Box III and the O2 Wireless Box II, suffer from the bug. Subscribers of other ISPs that use the device are also likely to be exposed to the same threat."
It looks like it relies on the fact that most people leave the Internal IP address (192.168.1.254) of the router as the default, and that often the user and password are left as blanks.
If you wish to change it, and delete the old default IP do the following:
Go to the Home Network menu
Click on Interfaces
Click on Local Network where it appears in the main "Window"
Click on Configure
You can then add,change and delete the IP addresses associated with your router on your local network.
If you wish to change the user ID/Password you use to login to the Web Interface its located on the Toolbox menu under User Management.
I have just received an email from PN suggesting I change the username & password, so where do I find the default password, and no mention of how to change username?
Also should I delete the IP address and leave it blank?
Need clearer instructions...
Also should I delete the IP address and leave it blank?
Need clearer instructions...
I actually went to user admin and created a new user and then deleted the default admin account.
Not that I'm paranoid but ..
Not that I'm paranoid but ..
Unfortunately the link in the e-mail sent out doesn't work, but takes you to a Plus net "Uh Oh!" page (Error 404 to the webbies). 
And although I have been using PCs for 25 years, I still didn't understand the advice on what to do. Where was the Home Network menu? I'm using Windows XP (showing my age, perhaps) but couldn't find anything helpful in Control Panel. In fact, I then realised that if you put the Router IP address into Internet Explorer/Firefox/Chrome/Opera it should come up. The rest of the instructions then make sense - note that if you don't know what the password was before, then it was probably blank - so don't enter anything for the old password.
If changing the password (or setting one up) beware that passwords and user names are case sensitive. Make a careful note of whether or not it is "administrator" or "Administrator" that is your default user, otherwise it may not let you in again!
Quote from: Barry http://community.plus.net/library/browsing/changing-the-default-password-on-a-thomson-585v7/ should be linked in the email sent out.
And although I have been using PCs for 25 years, I still didn't understand the advice on what to do. Where was the Home Network menu? I'm using Windows XP (showing my age, perhaps) but couldn't find anything helpful in Control Panel. In fact, I then realised that if you put the Router IP address into Internet Explorer/Firefox/Chrome/Opera it should come up. The rest of the instructions then make sense - note that if you don't know what the password was before, then it was probably blank - so don't enter anything for the old password.
If changing the password (or setting one up) beware that passwords and user names are case sensitive. Make a careful note of whether or not it is "administrator" or "Administrator" that is your default user, otherwise it may not let you in again!
