The Risks of Buying Used Routers for Corporate Security
Originally Published 2 years ago — by Ars Technica

Researchers from ESET found that more than half of the secondhand enterprise routers they bought for testing had been left completely intact by their previous owners, and the devices were brimming with network information, credentials, and confidential data about the institutions they had belonged to. All nine of the unprotected devices contained credentials for the organization's VPN, credentials for another secure network communication service, or hashed root administrator passwords.
