CVE-2018-18473

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM…

published March 19, 2019

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

🚨 A hidden backdoor is chilling on your PATLITE devices! 🎭 If you’ve got firmware version 1.45 or earlier on the NH-FB Series, you could be one sneaky password away from a system takeover! Think of it like a restaurant with a secret entrance. Just because most diners don’t know it exists, doesn’t mean a clever intruder can’t slip in through the back and access the kitchen! In this case, the 'kankichi' or 'kamiyo4' passwords are the keys to that hidden door. If an attacker finds this backdoor, they can easily enable SSH access, and with the default root password, they could execute commands with full control over the device. Imagine a hacker turning off your security cameras or tampering with critical systems without anyone noticing! That's a recipe for disaster!

Put simply

Think of it like a restaurant with a secret entrance. Just because most diners don’t know it exists, doesn’t mean a clever intruder can’t slip in through the back and access the kitchen! In this case, the 'kankichi' or 'kamiyo4' passwords are the keys to that hidden door. This vulnerability allows unauthorized access through hidden credentials that enable SSH on specific PATLITE device models. Once accessed, attackers can leverage default credentials to gain root access and execute malicious code remotely.

What to do

If an attacker finds this backdoor, they can easily enable SSH access, and with the default root password, they could execute commands with full control over the device. Imagine a hacker turning off your security cameras or tampering with critical systems without anyone noticing! That's a recipe for disaster! To protect your devices, immediately update the firmware to the latest version—1.46 for NH-FB, 1.11 for NH-FV, or 1.10 for NBM Series. Also, change default passwords to something strong and unique! 🛡️ Don’t worry! By taking these steps, you’ll shore up your security and keep those backdoors firmly closed. You've got this! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05647 · 92.9th percentile
Published
2019-03-19T22:19Z
EPSS history
Timeline
  • 19 MAR 22:19Z
    A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM…
    cvelistv5