CVE-2017-8218
CriticalSummary
TP-Link C2 and C20i devices with firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have backdoor accounts. These accounts include admin with password 1234, guest with password guest, and test with password test.
Risk Assessment
The presence of backdoor accounts poses a serious security risk, allowing unauthorized access to the devices. This could lead to device takeover and data leakage.
Recommendation
It is recommended to immediately update the firmware of TP-Link C2 and C20i devices and change the default passwords to stronger ones. Additionally, monitor access to the devices.
Original NVD description (English source)
vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.