TOTOLINK N350R Telnet Service Backdoor Vulnerability

A backdoor vulnerability has been identified in the TOTOLINK N350R router, specifically in version 1.2.3-B20130826. The issue arises in the Telnet service, within the 'formSysTel' function of the '/boafrm/formSysTel' file. The vulnerability is triggered by manipulating the 'TelEnabled' parameter, allowing remote access through a backdoor. This vulnerability has been publicly disclosed and is actively exploitable.

Impact

Exploitation of this vulnerability creates a backdoor, allowing unauthorized remote access to the device via Telnet.

Remediation

It is recommended to apply restrictive firewall rules to block unauthorized access to the Telnet service.