published July 17, 2022
🚨 A backdoor account is waiting for you on Nexans FTTO GigaSwitch models, ready to sneak in through SSH like an uninvited guest crashing a party! 🎉 Think of it like a hotel that has a secret entrance known only to a few. Guests with the right key can bypass the main reception and access any room without a single check-in. This backdoor allows attackers to waltz right in, undetected! With this backdoor, an attacker could gain SSH access to the device and potentially take control of its configuration. This means they could intercept data, alter settings, or knock the whole network offline, leaving you scrambling to restore everything.
Think of it like a hotel that has a secret entrance known only to a few. Guests with the right key can bypass the main reception and access any room without a single check-in. This backdoor allows attackers to waltz right in, undetected! The vulnerability involves a hidden SSH account implemented in libnx_apl.so on Nexans FTTO GigaSwitch devices, allowing unauthorized logins on ports 50200 or 50201, sidestepping security measures.
With this backdoor, an attacker could gain SSH access to the device and potentially take control of its configuration. This means they could intercept data, alter settings, or knock the whole network offline, leaving you scrambling to restore everything. To secure your systems, upgrade your Nexans FTTO GigaSwitch firmware to versions 6.02N or 7.02 and ensure that SSH access is properly restricted. Additionally, monitor your network for any unauthorized access attempts. 🛡️ You've got this! Patch those devices and keep your network safe from unexpected guests! 🔒💪