CVE-2019-8950

NONE EPSS 83.5%
Published Feb 20, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 20, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.

Threat Intelligence

EPSS Exploit Probability
83.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-798 Use of Hard-coded Credentials Authentication

Affected Products 2

VendorProductVersionRange
dasannetworksh665_firmware1.46p1-0028any
dasannetworksh665*any

References 2

  • blog.burghardt.pl https://blog.burghardt.pl/2019/02/dasan-h665-has-vendor-backdoor-built-into-busyboxs-bin-login/
    ExploitThird Party Advisory
  • seclists.org https://seclists.org/bugtraq/2019/Feb/32
    ExploitMailing ListThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.