Exclusive: Flaws in common Wi-Fi Router set up Hotspot Hacks

Researchers at Senrio disclosed two vulnerabilities in the TP-Link WR841N Version 8 router that allow an attacker (with physical proximity) to execute administrative commands without authentication, force the device to connect to an attacker-controlled hotspot to restore default credentials, and then leverage a stack overflow to install and run malicious code; Senrio observed ~93,000 deployed WR841N units worldwide (not all V8) and reported a patch issued by TP-Link after several months.