BE126 WIFI repeater 1.0 vulnerabilities

There is a LFD (local file disclosure) vulnerability on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). After logging in, they can read, write to the file system, or execute any code.

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). The attacker can make a user connected to the repeater click on a malicious link that will log into the telnet and infect the device with malicious code.