Hidden £3 Wi-Fi Extender Exposes Major Security Flaw

A cheap £3 Wi-Fi extender has revealed significant security concerns regarding low-cost connected devices. Security researcher Keiran Smith found a hidden administrator account within the device's firmware. This account uses a fixed password identical across all units, presenting a serious risk as it bypasses ordinary user controls. The hidden credentials allow for remote access without physical interaction with the device. Furthermore, changing the publicly visible administrator password does not revoke this concealed access. The extender also exhibits a command injection weakness and inadequate protection for software updates, raising further security questions about its design and manufacturing. These flaws could stem from accidental oversight during factory testing rather than malicious intent, but they underscore the potential security challenges posed by inexpensive smart hardware. Consumers focusing on initial savings may be unaware of the underlying software risks embedded in such connected equipment.