RCE on Telia Routers
So this issue affects Telia Lithuania clients.
But I wouldn't be surprised if the same (or similar) issue affects clients in Sweden.The article mentions a leaked password hash from 2014, but as far as I know, there were at least 3 password (not hash!) leaks over the last 10 years.Generally, I recommend people buy their own routers and never use the "Self Service" for managing passwords.As for hostility of service providers - the situation isn't that good.Some years ago, a white hat reported some data leak vulnerabilities in a medical "self service" portal.Vulnerability: change your personal code/id (SSN for folks in US) to another person's number in the POST, and voila - you get the medical history of another person.What happened is that the white hat got blamed for "hacking" that system.Result: Vulnerabilities aren't getting reported.
Bad guys are exploiting them left and right.
White hats don't bother disclosing them.I personally know at least 5 exploitable vulnerabilities in some government websites, but I won't be disclosing them, since that will land me in a lot of trouble.EDIT: grammar