| Título | Beetel 777VR1 Firmware Versions: V01.00.09 / V01.00.09_55 Unauthorized SSH Service Activation - CWE-284 |
|---|
| Descripción | Unauthorized SSH Service Activation via Diagnostic Interface, Web Console and ACL, MIB Manipulation Leading to Remote Device Administrative Compromise
Affected Product
Product: Beetel 777VR1 Broadband Router
Firmware Versions: V01.00.09 / V01.00.09_55
Vulnerability Classification
CWE-284 - Improper Access Control (Primary)
CWE-306 - Missing Authentication for Critical Function
CWE-269 - Improper Privilege Management
CWE-287 - Improper Authentication
CWE-521 - Weak Password Requirements
CWE-798 - Use of Hard-coded Credentials
Vulnerability Description
A critical vulnerability exists in the Beetel 777VR1 Broadband Router firmware versions V01.00.09 and V01.00.09_55 that allows an attacker to remotely enable and access the SSH service, leading to full device compromise.
The firmware exposes multiple unauthenticated management interfaces, including the diagnostic shell and web console, that allow direct manipulation of ACL rules and internal Management Information Base (MIB) parameters. By removing SSH from the ACL blacklist and modifying SSH-related MIB configuration values, an attacker can activate remote SSH access.
Once enabled, the SSH service permits authentication using weak, default credentials (admin:password) and grants access to a privileged diagnostic shell with root-equivalent permissions. No additional authentication boundaries, role separation, or access restrictions are enforced.
This results in complete remote administrative control of the device.
Impact
Remote administrative access via SSH
Full device compromise, and root-equivalent access.
Persistent configuration manipulation
Exposure of sensitive configuration and credentials
Attack Vector
Diagnostic Interface
Web Console
LAN / Network (post-ACL manipulation)
Severity
Critical
Proof/ Steps to Reproduce
Please see for detailed steps:
https://gist.github.com/raghav20232023/48e7aec5f0fb20292433227a55f22c19
Mitigation
Enforce strict authentication and role separation for management interfaces, including diagnostic interfaces and web consoles.
Prevent ACL and MIB modification without verified administrative authorization, and use very strong authentication.
Author and Credit
RAGHAV AGRAWAL |
|---|
| Fuente | ⚠️ https://gist.github.com/raghav20232023/48e7aec5f0fb20292433227a55f22c19 |
|---|
| Usuario | raghav_2026 (UID 94388) |
|---|
| Sumisión | 2026-02-03 22:08 (hace 8 meses) |
|---|
| Moderación | 2026-02-17 08:00 (13 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 346267 [Beetel 777VR1 hasta 01.00.09 Telnet Service/SSH Service escalada de privilegios] |
|---|
| Puntos | 0 |
|---|