PT-2019-19276 · Dasan · Dasan H665

Krzysztof Burghardt · Published 2019-02-20 · Updated 2024-02-23 · CVE-2019-8950

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DASAN H665 version 1.46p1-0028

Description A backdoor account exists in the /bin/login of DASAN H665 devices, allowing an attacker to login to the admin account via TELNET using the account dnsekakf2$$. This issue has seen increased interest, indicating potential exploitation.

Recommendations For DASAN H665 version 1.46p1-0028, consider disabling TELNET access to prevent exploitation of the backdoor account dnsekakf2$$ until a patch is available. Restrict access to the admin account to minimize the risk of unauthorized login.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-8950

Affected Products

Dasan H665

References · 5

• 🔥 https://blog.burghardt.pl/2019/02/dasan-h665-has-vendor-backdoor-built-into-busyboxs-bin-login · Exploit
• 🔥 https://seclists.org/bugtraq/2019/Feb/32 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8950 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8950 · Vendor Advisory
• https://twitter.com/NTKramer/status/1761104594778640426 · Twitter Post