The most important thing to understand is that this is ONLY a risk if you are allowing users outside your local network to access Supermon or Allmon on your node. You would have allowed this by setting up a port forwarding rule in your WiFi/Router for the port of the Supermon or Allmon web servers, typically port 80. This is NOT something Node-Ventures or your ClearNode would do for you automatically – it would have been done by you or by another at your request.

Note: this is NOT the port forwarding rule many of you have installed to allow incoming connection for AllStar or EchoLink. Those connections are not affected.

If you are aware that you installed the web server port forwarding rule for Allmon or Supermon – DISABLE OR REMOVE IT IMMEDIATELY.

We are going to release an update in the coming days that will remove this vulnerability irrespective of your exposing the web server to outside users.

For ASL3 based nodes this will be a standard package update and you will be notified in your ClearNode Smartphone App.

For HamVoIP based nodes this will involve installing Supermon2 and disabling Supermon – this will be automated in an update script.

73 … Gerry.