| 제목 | TOTOLINK A720R V4.1.5cu.630_B20250509 Backdoor |
|---|
| 설명 | A vulnerability has been identified in TOTOLINK A720R firmware within the cstecgi.cgi component. The firmware contains undocumented functionality that allows an attacker to enable the Telnet service by sending two specially crafted HTTP requests containing a hardcoded password and a validation code derived from the device's current date. The supplied values are verified by the firmware and, upon successful validation, the Telnet daemon is started through a call to `system()`.
Once enabled, the Telnet service can be accessed using the same hardcoded credentials, providing root-level access to the device. An unauthenticated attacker with network access to the management interface can therefore obtain full control over the affected device, compromising its confidentiality, integrity, and availability. |
|---|
| 원천 | ⚠️ https://github.com/Xernary/a720r-telnet-backdoor |
|---|
| 사용자 | Xernary (UID 91325) |
|---|
| 제출 | 2026. 06. 15. PM 06:49 (4 개월 ago) |
|---|
| 모더레이션 | 2026. 07. 27. AM 09:15 (1 month later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 180225 [TOTOLINK A720R 4.1.5cu.470_B20200911 Telnet Service 약한 인증] |
|---|
| 포인트들 | 0 |
|---|