Bugs & Fixes: Asus router vulnerability gives Plug and Play a new meaning
Though there are security issues with many Internet devices, Asus’s routers have been vulnerable to a situation where turning on UPnP would expose the FTP and SMB ports to the Internet–without password protection. Any storage attached directly to the router is completely exposed. PCWorld Norway’s Clas Mehus says that combing these exposed devices for user’s personal data of an especially revealing nature has become a pastime among loser Web surfers with nothing better to do. Asus fixed this problem with firmware release 3.0.0.4.374.4561, but you’ll need to download it and install it as there’s no auto-update feature.