Why is my AV reporting a network security issue?

My AV program keeps indicating that I have a network security issue --> "router has a weak password - the default password, one that is easily guessed or none at all."

I'm certain that both router passwords (the one used to log on the the network and the one used to make changes to the routers settings) are as strong as possible, so I'm not understanding why I keep receiving this warning? The only thing I can think of is that the username that came with the router cannot be changed.

Any ideas????

The only reasonably explanation I could come with is that there could be some other form of access to the router, some allow configuring them by FTP or Telnet, and those can have weak passwords in addition to the main web-based one. Just a guess, but check out for that just in case.
Or maybe your current logins aren't that strong as you believe? Very unlikely, but possible.

If the thing is complaining just because the username, you can just discard it. Usernames are meant to be public anyway, while the actual secrecy must lie in the password instead. There is nothing bad in having a common username, just a common password is a problem.

Other than that, I have no idea. It could be a false positive or something else you can be overlooking. If available, read the AV documentation to try to figure out what's exactly being tested and why it complains.

Benteke said:

My AV program keeps indicating that I have a network security issue --> "router has a weak password - the default password, one that is easily guessed or none at all."

I'm certain that both router passwords (the one used to log on the the network and the one used to make changes to the routers settings) are as strong as possible, so I'm not understanding why I keep receiving this warning? The only thing I can think of is that the username that came with the router cannot be changed.

Any ideas????

What antivirus app you are using? How would it even know those passwords?

What router make/model do you have?

You mentioned that the router has two passwords:
1) one used to log on the network
2) one used to make changes to the router's settings

Is password number one used to connect to your ISP? Like for a PPPoE account? Or is the router also a wireless access point and password number one is the key needed to connect a Wi-Fi device?

UsernameIssues said:

What antivirus app you are using? How would it even know those passwords?

What router make/model do you have?

You mentioned that the router has two passwords:
1) one used to log on the network
2) one used to make changes to the router's settings

Is password number one used to connect to your ISP? Like for a PPPoE account? Or is the router also a wireless access point and password number one is the key needed to connect a Wi-Fi device?

I'm using AVAST (paid version), the router is a Netgear N900.

1) Sorry, I should have clarified....number one password is used to log on to the wireless network. If I hardwire the connection (ethernet cable), no password is needed.
2) this password is used to log in and setup/configure the router.


Sorry for the late reply.

https://blog.avast.com/2015/04/16/wi...c-and-at-home/

Poke around in the app and see if it can tell you more info about the supposed weakness.

You might want to ask AVAST why it flags your router. As mentioned before, there might be multiple ways to get into a router. In my opinion, the app should tell you how it got in (if it really did get in).

Hi, Thread owner,
i think Avast is doing a kind of aggressive scanning and giving all the router users a kind of security vulnerability. I also use avast and changed the router to new one. But still get the same alert. If you go to details, you also would be having the other weakness, in the form of yellow icons, down under.
I was shown rom 0 vulnerability and all . Please after scanning the avast home network, security, you just click the show. It would prompt you to go to the router page to change the password. The alert would be user:user, password:user, when normally it does not mean that . I had changed the admin password and still it says that as if it is a weak password. Did you see the avast web forum. I have raised those questions on their web forum but still to get the answer.
Please see the other thread that i raised in this fourm in the same subject

UsernameIssues said:

https://blog.avast.com/2015/04/16/wi...c-and-at-home/

Poke around in the app and see if it can tell you more info about the supposed weakness.

You might want to ask AVAST why it flags your router. As mentioned before, there might be multiple ways to get into a router. In my opinion, the app should tell you how it got in (if it really did get in).

This is exactly what I get if I run a Network Scan -->

Your device is not configured correctly

PROBLEM - Your network router is set to a weak password
RISK - Hackers can connect to the router and modify your network settings and/or disable internet connection
SOLUTION - Change the password in router settings

When I click SHOW details, it just displays
USERNAME:
PASSWORD:

There is nothing next to username or password, it’s just blank… So, to your point…. If Avast WAS able to get in to my router, wouldn’t the app be able to show my Username & Password and not just leave it “blank’ (as in the above)???

jraju said:

Hi, Thread owner,
i think Avast is doing a kind of aggressive scanning and giving all the router users a kind of security vulnerability....Please see the other thread that i raised in this fourm in the same subject

Thanks jraju.... Do you have a link to that thread?

It might be best to ask specific AVAST questions here https://forum.avast.com/?board=2.0

As i've said before
To get to your router Admin/Password page.
in location bar type
192.168.0.1
that will open the setiings page goto security settings password
I suspect owner is admin, and password either blank or 12345, or it will be with the paperwork you got with the router.

Change it .

Roy

torchwood said:

As i've said before
To get to your router Admin/Password page.
in location bar type
192.168.0.1
that will open the setiings page goto security settings password
I suspect owner is admin, and password either blank or 12345, or it will be with the paperwork you got with the router.

Change it .

Roy

Thanks Roy.... Already did that when I first installed the router. I've changed the password about 6-7 times and still get the same network security warning. The only 'weakness' I can think of is the fact that the username cannot be changed. But from what I understand, that's common with Netgear routers.