PT-2022-9947 · Sooteway · Sooteway Wi-Fi Range Extender

Published 2022-05-20 · Updated 2023-08-08 · CVE-2021-30028

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SOOTEWAY Wi-Fi Range Extender version 1.5

Description The issue allows attackers to access the TELNET service using default credentials, specifically the admin password for the admin account. This access enables attackers to erase, read, or write the firmware remotely.

Recommendations For SOOTEWAY Wi-Fi Range Extender version 1.5, change the default admin password to a strong, unique password to prevent unauthorized access to the TELNET service. As a temporary workaround, consider disabling the TELNET service until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-30028

Affected Products

Sooteway Wi-Fi Range Extender

References · 7

• 🔥 https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-30028 · Security Note
• https://osv.dev/vulnerability/CVE-2021-30028 · Vendor Advisory
• https://amazon.it/SOOTEWAY-Ripetitore-Extender-Wireless-Wmplificatore/dp/B08G55T46P · Note
• https://t.me/cvenotify/31002 · Telegram Post
• https://t.me/cvenotify/30511 · Telegram Post
• https://t.me/cibsecurity/43064 · Telegram Post