published January 19, 2020
🚨 A hidden backdoor in BACnet devices is waiting to be unlocked, and the password is a rather festive 'snowman'! 🎉 This is like finding an open window in a winter cabin — it looks cozy, but it also means anyone can stroll right in without knocking. The BC_Logon.swf file holds a cleartext password that can be exploited, leaving systems vulnerable. If an attacker discovers this backdoor, they could waltz through the door and gain unauthorized access to sensitive controls. With full access, they could manipulate system settings or disrupt operations — a scenario that could lead to serious operational disruptions.
This is like finding an open window in a winter cabin — it looks cozy, but it also means anyone can stroll right in without knocking. The BC_Logon.swf file holds a cleartext password that can be exploited, leaving systems vulnerable. The vulnerability exists in KMS Controls BAC-A1616BC BACnet devices, where the BACKDOOR_NAME variable in the BC_Logon.swf file contains the cleartext password 'snowman'. This could allow unauthorized users to bypass normal authentication processes.
If an attacker discovers this backdoor, they could waltz through the door and gain unauthorized access to sensitive controls. With full access, they could manipulate system settings or disrupt operations — a scenario that could lead to serious operational disruptions. To secure your devices, immediately change any default passwords, and inspect the use of BC_Logon.swf across your installations. Regularly audit your device configurations and ensure up-to-date firmware is applied. You’ve got this! Follow these steps, and you’ll bolster your defenses in no time. 🛡️