Get superfast AT&T Fiber internet
internet_privacy_advocate's profile

New Member

 • 

3 Messages

Wednesday, January 18th, 2023 3:27 AM

Disable smart home manager

I need to secure my network and the smart home manager represents a significant attack vector to my network. Please tell me how I can disable and remove it. I have a BGW320-500 router. Also I'd like to change my DNS servers.

dave006

Scholar

 • 

3.7K Messages

2 months ago

I need to secure my network and the smart home manager represents a significant attack vector to my network. Please tell me how I can disable and remove it. I have a BGW320-500 router. Also I'd like to change my DNS servers.

I am not sure how you see the Smart Home Application interface is an attack vector if you don't use.

It only requires your AT&T Credentials for your Online account which I would think you would be keeping secure. The SHM App is optional for smartphones but again it needs your AT&T Online ID and password. Still both vectors of attack.

I have a BGW320-500 router. Also I'd like to change my DNS servers.

Simple just run another DNS server on your LAN network or you can add a third-party Router in IP Passthrought mode and let manage your local network. You can disable Wi-Fi radios on the BGW320-500. Your third-party router will allow you to manage your own Wi-Fi settings.

ETA: still spelling...

Dave

(edited)

New Member

 • 

3 Messages

2 months ago

@dave006 Not sure if it was clear question was how to disable it. 


SHM is not only accessible to my local network it's connected to the global internet and thus exposed to those threat actors. In the event of a CVE in whatever tools they used to create the SHM router app, one can very easily use shodan.io or other tools to get a list of every AT&T router which is guaranteed to have SHM installed and enabled. It's implementation is not available so I have no way of verifying that it's secure or not.

That DNS solution would work but would increase latency and I shouldn't have to spend more money.

dave006

Scholar

 • 

3.7K Messages

2 months ago

That DNS solution would work but would increase latency and I shouldn't have to spend more money.

Then just hard code your DSN settings in each client at no cost to you.

Dave

JefferMC

ACE - Expert

 • 

31.6K Messages

2 months ago

Smart Home Manager, per se, is not installed in your Gateway.  Smart Home Manager is a service hosted by AT&T in their servers with access via web application and iOS and Android Mobile Apps that does interact with your Gateway via a private management connection.  Yes, it is on the cloud.  Yes, it could be attacked.  No, there's no way to turn off "your" Smart Home Manager.  Thus, as dave006 suggested, keep your AT&T credentials safe, and use a "password" with a significant number of bits with as much randomness as you can stand.

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.