TCP-32764

더 이상 이 저장소를 수동으로 업데이트하지 않습니다 목록에 라우터를 추가하려면 pull-request를 만들어 주세요. 또한 POC를 사용 하고 그 결과를 pull-request에 붙여넣는 것을 잊지 마세요. Telnet 클라이언트 및 기타 솔루션은 관련이 없을 수 있습니다일부 미탐/오탐이 보고됨. 내 Linksys WAG200GTCP/32764에서 발견한 백도어에 대한 몇 가지 임의의 코드/데이터입니다. 백도어는 다른 하드웨어에도 존재할 수 있으며, 이에 따라 이 readme를 업데이트하겠습니다. : 가능한 해결책: 인터넷에...

CVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

Belkin IoT Smart Plug Flaw Allows Remote Code Execution in Smart Homes

A vulnerability in a popular Wi-Fi–connected electric outlet for smart homes would allow a remote attacker to take over smart TVs and other devices, as well as execute code – potentially exposing tens of thousands of consumers to cryptomining, ransomware, information disclosure, botnet enslavemen...

Backdoor Vulnerability in UDP Port 39889 on D-Link DWR-932B LTE Router

The D-Link DWR-932B LTE is a wireless router. A backdoor vulnerability exists in UDP port 39889 of the D-Link DWR-932B LTE router. Since the string "HELODBG" can be sent as a hardcoded command to UDP port 39889, an attacker can use the vulnerability to launch a root-privileged Telnet on the route...

Dynalink routers backdoor?

I was playing with a Dynalink RTA 230 http://www.dynalink.co.nz/products/rta230.htm, a linux based mips-cored adsl router. Looking at embedded linux system, i've found something like a backdoor: cat /etc/passwd admin:xxxxxobscuredxxxxx:0:0:Administrator:/:/bin/sh...