“This is the second time in recent months that security researchers have warned of hotel Wi-Fi networks being a potential vector
of attack for cybercriminals, providing a not-so-subtle reminder that individuals must be ever-vigilant regarding the security of their devices and access points.”
Cylance, a security vendor, says that its security researchers at the Sophisticated Penetration Exploitation and Research team (SPEAR) have uncovered a flaw in the InnGate Wi-Fi router commonly used by many hotels that could be placing the devices of guests at risk. According to Wired, the Cylance team reports, the vulnerability could threaten not just guests, but could also spread to the hotels themselves if hackers are able to compromise the router to allow them to access other parts of the hotel network. Cylance says this could potentially impact reservations and billing.
The vulnerability, dubbed CVE-2015-0932 gives an attacker full read and write access to the file system of an ANTLabs’ InnGate device, Cylance reports.  Cyber thieves gain remote access through an unauthenticated rsync daemon running on TCP 873, which then allows them to read and write unrestricted to the file system of the Linux based operating system.
For more: http://bit.ly/1yYJZK7
