Title: X-Micro WLAN 11b Broadband Router Backdoor Administration Account Vulnerability
Severity: CRITICAL
Description:
X-Micro makes a variety of hardware products, including the 11b Broadband Router, a device with NAT and other "home-router" features as well as support for 802.11b wireless networks.
It has been reported that the firmware shipped with the 11b Broadband Router has built-in an administrative account that cannot be disabled. The account, username and password "super", appears to be a backdoor and may provide remote attackers possessing knowledge of the account with complete control over the device.
According to the author of the report, the built-in administration webserver listens on both internal and external interfaces. Attackers may authenticate with the "super" account from outside of the LAN and gain control of the device through this web interface. Once authenticated, it is possible for attackers to install new firmware on the device. Customized malicious firmware can be created to perform attacks such as sniffing, in addition providing access to hosts that are possibly unprotected on the internal LAN.
**It has been reported that version 1.6.0.1 of WLAN 11b Broadband Router also contains a built-in an administrative account that cannot be disabled. The account, username and password "1502", appears to be a backdoor and may provide remote attackers possessing knowledge of the account with complete control over the device.
Affected Products:
- X-Micro WLAN 11b Broadband Router 0.0.0
- X-Micro WLAN 11b Broadband Router Firmware 1.2.2
- X-Micro WLAN 11b Broadband Router Firmware 1.2.2.3
- X-Micro WLAN 11b Broadband Router Firmware 1.2.2.4
- X-Micro WLAN 11b Broadband Router Firmware 1.6.0.0
- X-Micro WLAN 11b Broadband Router Firmware 1.6.0.0.1
References:
- Gergely Risko: http://xmicro.risko.hu/
- X-Micro: WLAN 11b Broadband Router
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
