- Posted
- Site
-
ProLink PRS1841 is afflicted by a backdoor account.
-
SHA-256 |
3b3f62ff4e1b4590c8305809b96ee38b5562205c50d53c76fe183bb2b9098cc5
# Exploit Title: Router backdoor - ProLink PRS1841 PLDT Home fiber# Exploit Author: Lawrence Amer @zux0x3a
# Vendor Homepage: https://prolink2u.com/product/prs1841/
# Firmware: PRS1841U V2
# reference: https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers/Description
========================
Prolink PRS1841 discovered a secret privileged backdoor account
Routers allow attackers command execution privileges.
Router OS.
This vendor issued a vulnerable account that was called "adsl".
As the default password, use "realtek". An attacker could also use this account.
You can access your router via Telnet/FTP.
protocol.
PoC
=============================
adsl:$1$$m9g7v7tSyWPyjvelclu6D1:0:0::/tmp:/bin/cli
