CVE-2017-8771

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root"). The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the device with malicious code.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-20

Last modified

2024-08-05

Weaknesses

CWE-798

Affected products

• Wifi Repeater Firmware (Twsz)

References

• http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf