PT-2017-18518

CVE-2017-8772

·

Published

2017-09-20

·

Updated

2017-09-28

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0
Description The issue allows an attacker to log into the device using default credentials as root, with the username: root and password: root, since telnet is open by default. This enables the attacker to read the entire file system, write to the file system, or execute any desired code, which could be malicious.
Recommendations For BE126 WIFI repeater version 1.0, change the default root password to a strong and unique password to prevent unauthorized access. Additionally, consider disabling telnet and using a more secure protocol for remote access. Restrict access to the file system and limit execution privileges to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾