Brightbox Security Update

Well 4 hours on the phone to EE and I have now got them to push the firmware update to my Brightbox 1 router. It has updated as follows

Runtime Code Version: v0.09.94.0006-OT (Fri Sep 21 03:00:26 2012)
to
Runtime Code Version: v0.10.06.0001-OT (Wed Jan 22 22:50:41 2014)


I have also asked them to update my Brightbox 2, but they say that it is up to date
v0.01.42.0001-OT (Mon Aug 26 13:10:37 2013)

Is this correct? Did the security issue not affect both BB1 and BB2, as suggested in the BBC article.

Any help would be great

Steve

There is no official release of the latest security firmware upgrade for the EE Bright Box 1 router that I have seen.

My Bright Box 1 router still has�
Runtime Code Version: v0.09.94.0006-OT (Fri Sep 21 03:00:26 2012)
Boot Code Version: v1.00.10.0001-OT (Wed Dec 14 09:30:42 2011)
ADSL Modem Code Version: A2pD035b.d23i
Hardware Version: 01

http://help.ee.co.uk/system/selfservice.controller?C...

Hi Steve,

The version you have is the same version that EE provided me with so I think this is the patch they are going to start rolling out in their phased deployment.

I too was under the impression that the BrightBox 2 was affected after my conversation with the BBC. I will contact EE and see if I can get some further clarification direct from them.

You can check all of the links in my article against your BrightBox 2 to see if it is vulnerable. Some confirmation either way would actually be helpful.

Scott.

Here are the before and after details from my BB1

Before
Runtime Code Version: v0.09.94.0006-OT (Fri Sep 21 03:00:26 2012)
Boot Code Version: v1.00.10.0001-OT (Wed Dec 14 09:30:42 2011)
ADSL Modem Code Version: A2pD035b.d23i
Hardware Version: 01


After
Runtime Code Version: v0.10.06.0001-OT (Wed Jan 22 22:50:41 2014)
Boot Code Version: v1.00.10.0001-OT (Wed Dec 14 09:30:42 2011)
ADSL Modem Code Version: A2pD035b.d23i
Hardware Version: 01

Edited by deleted (Sat 01-Feb-14 14:12:27)

Hi Scott,

Thanks for your reply and all the hard work you have put into the matter.

A manager from EE Tech support India is going to call me tonight to let me know if he was able to find out if there would be an update for the BB2. I did point out the BBC article to him.

BB2
Runtime Code Version v0.01.42.0001-OT (Mon Aug 26 13:10:37 2013)
Boot Code Version 0.0.9-OT (Thu Aug 8 18:14:37 2013)
DSL Modem Code Version A2pv6F039c.d24j-AnnexA
Hardware Version 01


Cheers

Steve

Edited by deleted (Sat 01-Feb-14 14:14:28)

Good stuff. Keep me updated, I'm interested to know.

Scott.

Will do Scott.

Just hope he sticks to his word and actually calls back, as I can not face calling them again!

: )

Steve

No call back. Here we go again

: (

Just spoke to a "manager" who said he has read an internal article from 22/01/2014 to say that a new firmware will be released to BB2 soon.

Judging by the reps I have spoken to they are just making it go as they go along!

My BB1 has not had the firmware update as yet. Also EE appear to be very quiet on this matter. I would have thought that they would have posted something on their website as they did when firmware update was issued last yesr to change from Orange to EE.

Just an observation.