CVE-2019-16734

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

Default credentials

TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled...

CVE-2019-16734

CVE-2019-16734 affects Petwant PF-103 and Petalk AI with firmware versions 4.3.2.50 / 3.2.2.30, where the TELNET server uses default credentials, enabling remote attackers to execute arbitrary commands as root. Red Hat and other feeds corroborate the default-credential issue, describing it as a t...