Netis E1+ Hardcoded Root Account Vulnerability Allowing Unauthorized Administrative Access

A vulnerability exists in the Netis E1+ router, specifically in version 1.2.32533, due to a hardcoded root account. This flaw allows unauthenticated attackers to access the device using predefined credentials. Exploitation of this vulnerability provides full administrative rights on the network device, as the embedded root account's password can be cracked.

Impact

Exploitation of this vulnerability leads to unauthorized administrative access on the affected device, allowing attackers to fully control the router's functions and settings.

Reproduction

The vulnerability can be reproduced by accessing the Netis E1+ router running version 1.2.32533. The hardcoded root account can be used to log in in an unauthorized manner. Once logged in, the root account's password can be cracked, providing full administrative access.