Hardcoded Password in Netis, Netcore Routers Offers Backdoor to Devices

  • 26 August 2014
  • 3 replies
  • 512 views

Userlevel 7
Badge +54
August 26th, 2014, 09:02 GMT · By Ionut Ilascu
 
http://i1-news.softpedia-static.com/images/news-700/Hardcoded-Password-in-Netis-Netcore-Routers-Offers-Backdoor-to-Device.jpg - Open UDP port leaves backdoor open

 A password planted in the firmware of some routers manufactured in China offers attackers the possibility to bypass device security and access it in order to run arbitrary code.
The networking equipment goes by the name of Netcore in China, but it is also sold in other parts of the world, the US included, under the Netis brand.

Researchers at Trend Micro have observed that if they provide external access, the devices can be accessed through open UDP port number 53413, from any IP address. Full Article 

3 replies

Userlevel 7
good article Jasper that reminds me not to buy anything in China
Userlevel 7
Badge +62
Well all I can say is don't buy that Netis ..Netcore, Router or/ and return it if you can!

Very sad indeed that that this vulnerabilities are going on. 😞
Userlevel 7
Badge +56
How does anyone designing these things think this is a good idea?  My mind boggles.

Reply