UPDATE: TIME has issued a security alert for its D-Link DIR-850L Router.
UPDATE 2: D-Link has released its latest firmware for the DIR-850L router.
If you have a D-Link wireless router at home, do take note. Several D-Link routers from the DIR-800 series including a model that’s commonly bundled by TM UniFi and Time Broadband were found to have a security vulnerability. The issue was made known by Singapore’s Cyber Security Agency (CSA) and the Infocomm Media Development Authority (IMDA) in a joint advisory.
Below are the affected D-Link routers:
If you’re using one of the above models, these routers can be compromised to install malicious firmware and this puts your information at risk. Once exploited, hackers can take control of your router without having to know your username and password. You can learn more about this vulnerability over here.
The folks at D-Link are aware of the problem. They are promising a fix to be ready by this
Thursday, 21 September 2017 Friday, 22 September through as firmware update.
As a security measure, D-link highly recommends that you take the following action in the time being:
1. Reset your router to its default factory setting (Do this if you have a copy of your TM UniFi/TIME broadband username/password at hand)
2. Disable the WAN remote admin feature
3. Do not access the router through unauthorised WiFi
4. Change the wireless SSD password and PIN code to prevent unauthorised users from accessing the LAN
5. Change the device’s administrator password. Use a strong new password.
UPDATE: TIME Broadband has issued a security alert with regards to its bundled DIR-850L router. They acknowledged that there’s a security risk and they are working closely with D-Link in the coming days for further action.
For the time being, they recommend their affected subscribers to disable remote management on their D-Link DIR-850L routers. You can follow the instructions over here.
UPDATE 2: TM has issued a statement on the D-Link DIR-850L wireless router security issue.
UPDATE 3: D-Link has released its latest firmware for the DIR-850L router.
WARNING: Reader Wilson Yong has highlighted to us that the latest DIR-850L firmware from D-Link is buggy. Despite being able to go online, the router will show orange for internet indicating there’s no connection. We recommend not to download until D-Link sorts this out. If you’re a TIME or TM UniFi customer, it is recommended to wait for further instructions from your provider.