Vodafone is in the news again, perhaps unfairly - according to the article, an older HHG2500 was (probably) hacked into because the default passwords weren’t changed by the VF subscriber...
Did weak wi-fi password lead the police to our door?
Thinking only of the router security aspect of the story then can Vodafone reasonably be held responsible for an end user’s failure (for whatever reason) to take steps to secure a router?
I have two of these old devices so naturally, I had a look at the labels on them - both have a different wifi password to each other - fairly complex with 15 characters each and both have different SSIDs. I can’t remember if these modems insisted on the default password being changed the first time the UI was accessed? I am sure the later THG3000 does but HHG2500?
Could unauthorised access be achieved with the VF App without any password details or physical access to the router? From a car parked outside your house, presumably the wifi password would be needed to gain access to the UI in the first place
The salutary lesson is of course, ‘if it arrives with default passwords, change them as a priority’.
