Need extra help installing your Ooma Hub or Telo system? Let us know.
#41825 by dknyinva
Thu Jan 14, 2010 5:19 am
Bottom line...any network devices (i.e. router, switch, etc...) should have some type of authentication. The fact that ooma setup page does not is a security risk whether you have a stringent router behind it or not
#41840 by Aveamantium
Thu Jan 14, 2010 6:36 am
indie_dev, maybe you should be providing this information where it can do some good like to Dennis P. I would PM the 3 security vulnerabilities that you have discovered and make a case for a password protected access page.
#41841 by dknyinva
Thu Jan 14, 2010 6:40 am
The only thing I agree with indie_dev in this post or other that he posted is to bring attention to ooma to implement an authentication on the ooma setup page. Otherwise, there isn't much in security breach unless you make it known to anyone else about your network and public IP addreess. The main point here is the 172.27.x.x is a private network and not routable and cannot be accessed from the Internet.
Last edited by dknyinva on Thu Jan 14, 2010 6:46 am, edited 1 time in total.

Who is online

Users browsing this forum: No registered users and 4 guests