PT-2017-18518 · Be · Be126 Wifi Repeater

Published 2017-09-20 · Updated 2017-09-28 · CVE-2017-8772

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0

Description The issue allows an attacker to log into the device using default credentials as root, with the username: root and password: root, since telnet is open by default. This enables the attacker to read the entire file system, write to the file system, or execute any desired code, which could be malicious.

Recommendations For BE126 WIFI repeater version 1.0, change the default root password to a strong and unique password to prevent unauthorized access. Additionally, consider disabling telnet and using a more secure protocol for remote access. Restrict access to the file system and limit execution privileges to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-8772

Affected Products

Be126 Wifi Repeater

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-8772 · Security Note
• http://digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf · Note