CVE-2017-7964

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS…

published April 19, 2017

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

🚨 The Zyxel WRE6505 has a default TELNET password of '1234' — a security slip-up so simple, it’s practically an open invitation for mischief! 🔥 Think of this like leaving your car unlocked with the keys on the dashboard — it’s just waiting for someone to hop in and take it for a joyride. In this case, attackers can easily exploit the predictable password to reconfigure your DNS settings and cause chaos. An attacker could effectively hijack your DNS settings, redirecting your traffic wherever they please — potentially leading to phishing attempts or data theft. Imagine your devices suddenly pointing to an imposter site instead of the real deal; that’s an absolutely devastating scenario!

Put simply

Think of this like leaving your car unlocked with the keys on the dashboard — it’s just waiting for someone to hop in and take it for a joyride. In this case, attackers can easily exploit the predictable password to reconfigure your DNS settings and cause chaos. This vulnerability allows remote attackers to gain access to Zyxel WRE6505 devices due to the default TELNET password being set to '1234', making it easy to manipulate the built-in dnshijacker functionality.

What to do

An attacker could effectively hijack your DNS settings, redirecting your traffic wherever they please — potentially leading to phishing attempts or data theft. Imagine your devices suddenly pointing to an imposter site instead of the real deal; that’s an absolutely devastating scenario! Change the default TELNET password immediately to something strong and unique. Additionally, consider disabling TELNET access altogether and using more secure protocols like SSH for remote management. Regularly check device configurations to ensure they have not been tampered with. You've got this! Follow these steps and you’ll be well on your way to securing your network. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02477 · 84.3th percentile
Published
2017-04-19T16:00Z
EPSS history
Timeline
  • 19 APR 16:00Z
    Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS…
    cvelistv5