| Título | TOTOLINK A720R V4.1.5cu.630_B20250509 Backdoor |
|---|
| Descripción | A vulnerability has been identified in TOTOLINK A720R firmware within the cstecgi.cgi component. The firmware contains undocumented functionality that allows an attacker to enable the Telnet service by sending two specially crafted HTTP requests containing a hardcoded password and a validation code derived from the device's current date. The supplied values are verified by the firmware and, upon successful validation, the Telnet daemon is started through a call to `system()`.
Once enabled, the Telnet service can be accessed using the same hardcoded credentials, providing root-level access to the device. An unauthenticated attacker with network access to the management interface can therefore obtain full control over the affected device, compromising its confidentiality, integrity, and availability. |
|---|
| Fuente | ⚠️ https://github.com/Xernary/a720r-telnet-backdoor |
|---|
| Usuario | Xernary (UID 91325) |
|---|
| Sumisión | 2026-06-15 18:49 (hace 4 meses) |
|---|
| Moderación | 2026-07-27 09:15 (1 month later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 180225 [TOTOLINK A720R 4.1.5cu.470_B20200911 Telnet Service autenticación débil] |
|---|
| Puntos | 0 |
|---|