Comcast Leaks Xfinity Customer Data
Return To ArticleA bug in a Comcast website that is used to activate the routers of Xfinity customers was leaking sensitive information, according to two researchers.
Researchers Karan Saini and Ryan Stevenson told ZDNet that the website could be tricked into displaying the home address where a router is located, as well as the WiFi name and password of the network.
All a potential attacker would need is a customer account ID and that customer’s house or apartment number to reveal their network’s WiFi name and password. Fortunately, this was only the case for customers using an Xfinity router and did not affect customers using their own device.
