CVE-2017-8772

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root"…

published September 20, 2017

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

🚨 An open telnet port with default credentials is like leaving your front door wide open and posting the key on the doormat! Think of your BE126 WIFI repeater as a cozy little inn, but instead of checking IDs, it just lets anyone walk in with a classic 'guest' name tag. An attacker could stroll right into your system and explore all the hidden rooms — from reading files to changing the decor, or even throwing a wild party with malicious code! This vulnerability is absolutely devastating! An attacker can not only read your entire file system but also write to it and execute any code they want. Imagine the chaos if a stranger could change your passwords, steal personal data, or even turn your devices against you. Your digital world would be in real danger!

Put simply

Think of your BE126 WIFI repeater as a cozy little inn, but instead of checking IDs, it just lets anyone walk in with a classic 'guest' name tag. An attacker could stroll right into your system and explore all the hidden rooms — from reading files to changing the decor, or even throwing a wild party with malicious code! The CVE-2017-8772 vulnerability allows attackers to access the BE126 WIFI repeater through an open telnet service with default credentials (username: "root", password: "root"). This presents a significant security risk since it grants full control of the device to anyone who knows the defaults.

What to do

This vulnerability is absolutely devastating! An attacker can not only read your entire file system but also write to it and execute any code they want. Imagine the chaos if a stranger could change your passwords, steal personal data, or even turn your devices against you. Your digital world would be in real danger! Immediately change the default credentials to something strong and unique. Consider disabling the telnet service altogether, and if that's not possible, switch to a more secure protocol. Regularly audit your network devices to ensure they’re not left vulnerable! You've got this! Follow these steps, and soon you'll have your digital fortress fortified! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01405 · 72.4th percentile
Published
2017-09-20T14:00Z
EPSS history
Timeline
  • 20 SEP 14:00Z
    On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root"…
    cvelistv5