Vendor Backdoor Vulnerability in DBLTek GoIP Devices

CVE-2017-20204

What is CVE-2017-20204?

DBLTek GoIP devices, including models 1, 4, 8, 16, and 32, are compromised by an undocumented vendor backdoor in the Telnet administrative interface. This flaw allows unauthorized remote authentication through a flawed proprietary challenge-response mechanism. An attacker can exploit this weakness to authenticate without a secret and gain root access to the device. This results in the potential for persistent remote code execution, complete control over the device, and manipulation of any managed services. There have been firmware updates since December 2016 intended to complicate exploitation, but it remains unclear if these modifications effectively address the underlying security issue.

References