PT-2025-42215 · Dbltek · Dbltek Goip

Published 2025-10-15 · Updated 2025-10-15 · CVE-2017-20204

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions DBLTek GoIP devices versions 1, 4, 8, 16, and 32

Description DBLTek GoIP devices contain an undocumented vendor backdoor in the Telnet administrative interface. This allows remote authentication as an undocumented user through a flawed challenge–response scheme. An attacker can authenticate without a secret and gain a root shell, leading to persistent remote code execution and full device compromise. The firmware was updated in December 2016 to increase the complexity of exploitation, but full mitigation is unconfirmed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1242

Related Identifiers

CVE-2017-20204

Affected Products

Dbltek Goip

References · 7

• https://osv.dev/vulnerability/CVE-2017-20204 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20204 · Security Note
• https://github.com/JacobMisirian/DblTekGoIPPwn · Note
• http://dbltek.com · Note
• https://trustwave.com/en-us/resources/blogs/spiderlabs-blog/undocumented-backdoor-account-in-dbltek-goip · Note
• https://t.me/CVEtracker/34926 · Telegram Post
• https://vulncheck.com/advisories/dbltek-goip-telnet-admin-interface-undocumented-backdoor · Note