CVE-2017-8771

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root"…

published September 20, 2017

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

⚠️ An open telnet port with default credentials presents a dangerously easy entry point for attackers! Imagine a door left unlocked and marked "open for business"—who wouldn't want to stroll in? 🔥 Think of your BE126 WiFi repeater as a café with a welcome mat and a sign saying 'Help Yourself!'—without any staff to supervise. If someone walks in and sets up shop, it could lead to a chaotic mess! An attacker can take full control of the repeater, logging in as root and infecting it with malicious code. This could lead to compromised devices on the network, allowing data leaks or further attacks on connected devices. It's not just a nuisance; it could wreak havoc on your entire home or office network!

Put simply

Think of your BE126 WiFi repeater as a café with a welcome mat and a sign saying 'Help Yourself!'—without any staff to supervise. If someone walks in and sets up shop, it could lead to a chaotic mess! This vulnerability allows attackers to log into the BE126 WiFi repeater's telnet interface using the default 'root' credentials. Once logged in, they can execute any command and potentially deploy malicious code on the device.

What to do

An attacker can take full control of the repeater, logging in as root and infecting it with malicious code. This could lead to compromised devices on the network, allowing data leaks or further attacks on connected devices. It's not just a nuisance; it could wreak havoc on your entire home or office network! To secure your BE126 WiFi repeater, immediately change the default telnet credentials to a strong, unique password. If possible, disable telnet access altogether and opt for more secure remote management options. Regularly check for firmware updates from the manufacturer as well! You've got this! With a few simple steps, you can lock down your network and keep the bad guys at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01405 · 72.2th percentile
Published
2017-09-20T14:00Z
EPSS history
Timeline
  • 20 SEP 14:00Z
    On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root"…
    cvelistv5