Hard-Coded Credentials in Dbit T-CPE301K Router

Executive Summary

This vulnerability involves the Dbit T-CPE301K 4G WiFi mini-router using predefined static credentials for its Telnet service. An attacker on the same network can exploit this to gain full root access to the device via port 23.

Useful 0 Not Useful 0

Detection Guidance

Check if the Dbit T-CPE301K device has Telnet service (port 23) open. Use commands like 'nmap -p 23 <device-ip>' to scan for open ports. If Telnet is enabled, verify if static credentials are being used by attempting to log in via Telnet with common credentials.

Useful 0 Not Useful 0

Impact Analysis

An attacker could take full control of your router, intercept network traffic, install malware, or use the device as a pivot point to attack other systems on your network.

Useful 0 Not Useful 0

Mitigation Strategies

Disable Telnet service on the device if possible. Change default credentials to strong, unique passwords. Ensure the device firmware is updated to the latest version. Block external access to port 23 via firewall rules if remote access is not required.

Useful 0 Not Useful 0