CVE-2014-7279

Critical

Published: 23/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Konke Smart Plug K does not require authentication for TELNET sessions, allowing remote attackers to obtain 'equipment management authority' via TCP traffic to port 23.

Risk Assessment

The lack of authentication in TELNET sessions poses a serious security risk, enabling attackers to remotely manage the device.

Recommendation

It is recommended to disable TELNET access or implement authentication mechanisms to secure the device against unauthorized access.

Original NVD description (English source)

The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23.