Installation document for Router App should use https
The documentation for installing the router app uses http://
for downloading scripts; this is trivial to exploit as man-in-the-middle attacks and make malware injection possible with escalated privileges. It should be switched to https://
.
The install script itself also uses http://
to download the VyprVPN .tar.gz file, which is again exploitable and uses no checksums to check integrity.
12
votes
