Summary
The remote Sitecom Device is prone to a hard-coded credentials bypass vulnerabillity
Impact
Attackers can exploit these issues to gain unauthorized access to the affected device and perform certain administrative actions.
Impact Level: System
Solution
Updates are available.
Insight
A user can login to the Telnet service (with root privileges) using the hard-coded credential admin:1234. This administrative account is hard-coded and cannot be changed by a normal user.
Detection
Start a telnet session with the hard-coded credentials.
