Router Security risk

[#1]

I have just discovered a serious security risk in relation to Plusnet Hub Two routers. Using tour public Ip address you can browse to your router. Normal routers prompt with a password, however Plusnet ones provide information about all your devices sitting on 2.4, 5 Ghz and wired. Not only that but it reveals the hostname, internal IP and MAC address of attached devices. Test your router by obtaining your public IP using whatismyip.com and then browsing to the IP provided.

[#2]

Is that just from inside your network?

Do you get the same effect from outside your network – eg on a phone using mobile data not Wifi?

[#3]

As whatsmyip is doing exactly what its name implies - no one else will get your IP - they will get their own, so no risk.

[#4]

Is that just from inside your network?

Yes, @IMM is correct. The router GUI is only accessible when connected to the local network. The fact that it works using the public IP (as well as the local one) is due to  NAT loopback i.e the router recognises the outgoing address is its own public IP and 'loops' the connection back without actually going to the internet.