CVE-2017-8772
CriticalSummary
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). After logging in, they can read, write to the file system, or execute any code.
Risk Assessment
The risk to the organization is that an attacker has full access to the file system, which can lead to data theft, introduction of malware, or complete takeover of the device.
Recommendation
It is recommended to immediately change the default login credentials and disable telnet access to minimize the risk of unauthorized access.
Original NVD description (English source)
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root") and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires (malicious or not).