all InfoSec news
VU#913565: Hard-coded credentials in Technicolor TG670 DSL gateway router
CERT Recently Published Vulnerability Notes kb.cert.org
Overview
The Technicolor TG670 Router DSL Gateway Router includes a hard-coded service account that allows for authentication over services on the WAN interface, using HTTP, SSH, or TELNET. The authenticated user can use it to gain full administrative control of the router.
Description
A hard-coded password refers to an unchangeable password that is stored within a device or an application. This type of password carries a significant risk as it can be exploited by malware or hackers to gain unauthorized …
account authentication control credentials dsl gateway hard hard-coded credentials http interface password router service services ssh telnet wan