Hacking group Gnucitizen have claimed that they have discovered a vulnerability in the Thomson Speedtouch 7G router, which is bad news for BT HomeHub users.

The HomeHub is BT's standard router and is based on the Speedtouch 7G and it's estimated that there three million in the UK. BT also plan to allow the hub to be opened up to passing Wi-Fi users of FON in a shared community, so this is of concern to many users if this exploit is true.

According to the group they have three demo exploits which will allow anyone to connect to the router via the internet, steal WEP/WPA keys and eavesdrop on VoIP conversations.
All that is required is that a user visits a carefully crafted webpage which then alerts the group to the location of the router.

The group have posted a video of the process, but it is a little short of details so verifying if this is an actual problem for HomeHub users becomes a little tricky. They claim to have revealed the details to BT and Thomson, but have had no response.

Hopefully if there is a problem BT can fix the issue when it upgrades the firmware to allow FON connections to be made from the router.