{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,22]],"date-time":"2026-05-22T20:09:21Z","timestamp":1779480561636,"version":"3.53.1"},"publisher-location":"New York, NY, USA","reference-count":20,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,5,31]],"date-time":"2026-05-31T00:00:00Z","timestamp":1780185600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1145\/3775042.3807882","type":"proceedings-article","created":{"date-parts":[[2026,5,22]],"date-time":"2026-05-22T19:50:03Z","timestamp":1779479403000},"page":"14-24","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Why Low-Cost Consumer Routers Remain Insecure: A Cross-Layer Trust Analysis"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5994-0959","authenticated-orcid":false,"given":"Ashutosh","family":"Kumar","sequence":"first","affiliation":[{"name":"Information Technology, Indian Institute of Information Technology Allahabad, Prayagraj, Uttar Pradesh, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1403-2639","authenticated-orcid":false,"given":"S.","family":"Venkatesan","sequence":"additional","affiliation":[{"name":"Information Technology, Indian Institute of Information Technology Allahabad, Prayagraj, Uttar Pradesh, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1311-0976","authenticated-orcid":false,"given":"Manish","family":"Kumar","sequence":"additional","affiliation":[{"name":"Information Technology, Indian Institute of Information Technology Allahabad, Prayagraj, Uttar Pradesh, India"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,5,31]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3617072.3617110"},{"key":"e_1_3_2_1_2_1","unstructured":"Shenyang China. 2017. Analysis and research on smart home gateway and information push. (2017)."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5753\/jisa.2024.3834"},{"key":"e_1_3_2_1_4_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Jeitner Philipp","year":"2022","unstructured":"Philipp Jeitner, Haya Shulman, Lucas Teichmann, and Michael Waidner. 2022. {XDRI} attacks-and-how to enhance resilience of residential routers. In 31st USENIX Security Symposium (USENIX Security 22). 4473\u20134490."},{"key":"e_1_3_2_1_5_1","first-page":"1409","article-title":"S2Net: Preserving privacy in smart home routers","volume":"18","author":"Shi Hang","year":"2019","unstructured":"Seung-seob Lee, Hang Shi, Kun Tan, Yunxin Liu, SuKyoung Lee, and Yong Cui. 2019. S2Net: Preserving privacy in smart home routers. IEEE Transactions on Dependable and Secure Computing 18, 3 (2019), 1409\u20131424.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"e_1_3_2_1_6_1","unstructured":"MITRE Corporation. 2024. CVE-2024-4231: Improper access control on serial interface in Digisol DG-GR1321 Router. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-4231. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_7_1","unstructured":"MITRE Corporation. 2024. CVE-2024-46340: Plaintext credential transmission after factory reset in TP-Link TL-WR845N routers. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-46340. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_8_1","unstructured":"MITRE Corporation. 2025. CVE-2022-50803: Default credentials in JM-DATA ONU JF511-TV allow unauthorized access. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-50803. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_9_1","unstructured":"MITRE Corporation. 2025. CVE-2024-57040: Hardcoded root password vulnerability in TP-Link TL-WR845N routers. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-57040. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_10_1","unstructured":"MITRE Corporation. 2025. CVE-2025-53758: Default credential vulnerability in Digisol DG-GR6821AC Router. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2025-53758. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_11_1","unstructured":"MITRE Corporation. 2026. CVE-2025-21589: Authentication bypass in Juniper Networks Session Smart products. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2025-21589. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_12_1","unstructured":"MITRE Corporation. 2026. CVE-2026-0625: Authentication bypass and DNS configuration vulnerability in D-Link DSL\/DIR\/DNS devices. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-0625. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_13_1","unstructured":"MITRE Corporation. 2026. CVE-2026-22082: Insecure session ID management in Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-22082. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_14_1","unstructured":"MITRE Corporation. 2026. CVE-2026-22544: Credentials exposed in clear text over the network. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE- 2026-22544. Accessed: 2026-01-19."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.3390\/electronics13122371"},{"key":"e_1_3_2_1_16_1","volume-title":"Owning your home network: Router security revisited. arXiv preprint arXiv:1506.04112","author":"Niemietz Marcus","year":"2015","unstructured":"Marcus Niemietz and J\u00f6rg Schwenk. 2015. Owning your home network: Router security revisited. arXiv preprint arXiv:1506.04112 (2015)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSCE60160.2023.00124"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/JCSSE.2018.8457340"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678914"},{"key":"e_1_3_2_1_20_1","volume-title":"Lianying Zhao, Mengyuan Zhang, Lifa Wu, and Wei Zhang.","author":"Ye Junjian","year":"2024","unstructured":"Junjian Ye, Xavier De Carne De Carnavalet, Lianying Zhao, Mengyuan Zhang, Lifa Wu, and Wei Zhang. 2024. Exposed by Default: A Security Analysis of Home Router Default Settings and Beyond. IEEE Internet of Things Journal (2024)."}],"event":{"name":"ASIA CCS '26: ACM Asia Conference on Computer and Communications Security","location":"Bangalore India","acronym":"CPSS '26","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 12th ACM Cyber-Physical System Security Workshop"],"original-title":[],"deposited":{"date-parts":[[2026,5,22]],"date-time":"2026-05-22T19:50:39Z","timestamp":1779479439000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3775042.3807882"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,31]]},"references-count":20,"alternative-id":["10.1145\/3775042.3807882","10.1145\/3775042"],"URL":"https:\/\/doi.org\/10.1145\/3775042.3807882","relation":{},"subject":[],"published":{"date-parts":[[2026,5,31]]},"assertion":[{"value":"2026-05-31","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}