CALIX ROUTER FLAW EXPOSES INTERNAL NETWORKS

The vulnerability in the Calix GS5239XG router enables unauthenticated attackers to remotely create port-forwarding rules without authorization. This bypasses NAT (Network Address Translation) protections that typically isolate internal devices from public internet access. An attacker exploiting the flaw could expose printers, smart home devices, cameras, and other local network equipment to external threats. The vulnerability requires no user interaction or authentication credentials. Calix has not released a patch for the issue, leaving affected users vulnerable. The routers are widely deployed by broadband service providers across the United States, potentially impacting thousands of residential networks. Users with affected devices should contact their internet service provider for guidance. Security researchers recommend restricting router admin access to local connections only and monitoring port-forwarding settings for unauthorized entries.