[wifi_is_simple]

well i was recently wondering about like if suppose someone knows my routers WAN IP, although i do know if i disable REmote access they cant access my router etc etc

but this question boggles me is it possible to remote tftp directly? that would be very exploitable as someone can upload a corrupt firmware and my router woudl go crazy and bricked..

i guess this applies to all routers apart rfom those running dd0wrt as i am currently using dd-wrt v24 on my wrt54gs v3....

so what do u ppl think? i am not knowledgabel into tftp stuff..so i wud apprecuiate feedback...

[pjm]

TFTP only works as far as I know from the CFE bootloader at that point the WAN port could not pass information through at all from the internet. You could flash a firmware through remote access if the router was not pass protected or security enabled. I have seen many routers still set on default. One could easily flash DDWRT or other firemare to these units or even change any and all settings. Of course a rest to default would take care of everything execpt a firmware flash.
PJM

[frater]

One could not only flash DD-WRT on such a device, but also a modified firmware that would give you access to the router always even if all security-settings in the webinterface are enabled.

resetting it to its default settings wouldn't make any difference...

[wifi_is_simple]

but is it possible to tftp without entering the outer password on internet??

[wifi_is_simple]

i need someone to answer who is very much knowledgaebale in tftp ...has nayone tried this via the internet? i mean otuside the LAN...?

[pjm]

TFTP flash is only possible durning bootwait or when the CFE has entered a call to receive TFTP flash. One cannot do it throught the WAN port from the outside because it is NOT loaded yet.