Six million Sky broadband routers had major security flaw

25 November 2021, 13:34

Sky stock
Sky stock. Picture: PA

Security researchers said a software bug could have allowed hackers to take over a user’s home network.

Around six million Sky broadband routers contained a software bug that could have allowed hackers to take over home networks and access devices and personal data, a security company has said.

The flaw has been fixed, but the security researchers said it took the company nearly 18 months to fix the problem.

Sky said it took the security of its customers “very seriously” and had begun working to fix the problem as soon as it was made aware of it.

The bug, which was uncovered by the security group Pen Test Partners, affected users who had not changed the router’s default admin password – which was simple and easy to guess – and could enable hackers to easily reconfigure the router and take over a network just by directing the user to a malicious website.

This could then give hackers access to sensitive information including log-in details for online banking and other websites.

According to the researchers, the affected router models were: Sky Hub 3 (ER110), Sky Hub 3.5 (ER115), Booster 3 (EE120), Sky Hub (SR101), Sky Hub (SR203), and the Booster 4 (SE210).

In addition, around 1% of the routers issued by Sky are not made by the company itself and could not be updated with the fix.

But customers who have one can ask Sky to replace it, free of charge.

Pen Test Partners said there was no evidence the flaw had been exploited, but criticised Sky for the time it took to fix the issue.

It claimed the internet service provider had repeatedly pushed back deadlines it had set to fix the problem.

The researchers said they understood the initial delay due to the coronavirus lockdown and the challenges facing internet providers because of the “vastly increased network loading as working from home became the new norm”, which it said it did not want to disrupt.

But they said they were concerned by the overall speed of the company’s response, saying they believed Sky “did not give the patch the priority their customers deserved”.

The group also encouraged anyone with a broadband router to change the passwords on it from the ones set by default.

In response, a Sky spokesperson said: “We take the safety and security of our customers very seriously.

“After being alerted to the risk, we began work on finding a remedy for the problem and we can confirm that a fix has been delivered to all Sky manufactured products.”

By Press Association

More Technology News

See more More Technology News

Nadine Dorries

Nadine Dorries uses TikTok rap to explain Online Safety Bill

Apple iPhones

Accessibility tools a ‘core value’ for Apple, says director

Social media

Facebook owner Meta updates privacy policy

The Queen with her corgis

‘PJ the corgi’ Platinum Jubilee emoji unveiled on royal Twitter account

Tesla and SpaceX chief executive officer Elon Musk

Shares jump as Elon Musk revises Twitter financing plan

A child using a laptop

New digital platform launched to boost online safety lessons for children

Glastonbury Festival 2019

EE expects Glastonbury data usage to double at this year’s festival

Ford geofencing technology

Ford trials geofencing tech to automatically control vehicle speed

The Duomo in Milan on Google Street View

Google Street View’s ‘time travel’ feature comes to smartphones

Facebook

Facebook and Instagram to reveal more on how ads target users

Mark Zuckerberg

Washington sues Mark Zuckerberg over Cambridge Analytica privacy breach

Google Pixel 6 and Pixel 6 Pro smartphones

More powerful cameras key to smartphone success, says Google manager

An underwater drone on a ship deck

Underwater drone carries out first-ever offshore wind farm inspection

Child uses laptop

Create watchdog to protect children online, charity says

Technology Stock

Dark web ‘scramble’ over Buffalo attack amid fears of post-pandemic attacks

Technology stock

Twitter users told to be wary of scam messages about verified accounts