PT-2018-9949 · Ee · Ee 4Gee Hh70Vb-2Be8Gb3

James Hemmings · Published 2018-10-30 · Updated 2019-01-30 · CVE-2018-10532

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: EE 4GEE HH70VB-2BE8GB3 HH70 E1 02.00 19

Description: An issue was discovered where hardcoded root SSH credentials are stored within the core app binary, which is used by the EE router for networking services. The default password is oelinux123. An attacker with knowledge of this password could login to the router via SSH as the root user, potentially leading to the loss of confidentiality, integrity, and availability of the system. This could also allow for the bypass of the "AP Isolation" mode and modification of settings for multiple Wireless networks.

Recommendations: For EE 4GEE HH70VB-2BE8GB3 HH70 E1 02.00 19, consider changing the default SSH credentials to prevent unauthorized access. As a temporary workaround, restrict SSH access to the router until a patch is available.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-10532

Affected Products

Ee 4Gee Hh70Vb-2Be8Gb3

References · 4

• 🔥 https://blog.jameshemmings.co.uk/2018/10/24/4gee-hh70-router-vulnerability-disclosure · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10532 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10532 · Vendor Advisory
• https://theregister.co.uk/2018/10/26/ee_4gee_hh70_ssh_backdoor · Note