CVE-2017-16523

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root…

published November 3, 2017

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

🚨 A default password for the root account? That's right! The MitraStar GPT-2541GNAC and DSL-100HN-T1 devices come with a super weak zyad1234 password that could give an attacker full control! 🔥 Think of it like a hotel where the front desk always gives out the same room key to everyone. Anyone with that key can waltz into any room, snooping around and taking what they want. That's what this default password does – it opens the door to your entire network! An attacker with knowledge of this password could gain full access to the device, allowing them to change settings, intercept data, and wreak havoc on your network without breaking a sweat. This could lead to total control over your internet connection, potentially compromising sensitive information or causing service disruptions.

Put simply

Think of it like a hotel where the front desk always gives out the same room key to everyone. Anyone with that key can waltz into any room, snooping around and taking what they want. That's what this default password does – it opens the door to your entire network! This vulnerability stems from the use of an undocumented default password (zyad1234) for the root account on the MitraStar GPT-2541GNAC and DSL-100HN-T1 devices, enabling unauthorized access to device settings.

What to do

An attacker with knowledge of this password could gain full access to the device, allowing them to change settings, intercept data, and wreak havoc on your network without breaking a sweat. This could lead to total control over your internet connection, potentially compromising sensitive information or causing service disruptions. Change the default password immediately to a strong, unique password. Also, review network settings and configurations to ensure no unauthorized access has taken place. Regularly check for updates from your device manufacturer to keep everything secure. You've got this! Follow these steps, and you'll ensure your devices are locked down tight! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03825 · 90.0th percentile
Published
2017-11-03T17:00Z
EPSS history
Timeline
  • 03 NOV 17:00Z
    MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root…
    cvelistv5