Accton-based Switches Backdoor Password Vulnerability

Bugtraq ID:	42947
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 02 2010 12:00AM
Updated:	Sep 02 2010 12:00AM
Credit:	Edwin Eefting
Vulnerable:	Edgecore ES4649 0 Dell PowerConnect 5224 0 3Com 3870 0 3Com 3812 0
Not Vulnerable:

Accton-based Switches Backdoor Password Vulnerability

Accton-based switches are prone to a security vulnerability due to the existence of a backdoor password.

Successful exploits will allow remote attackers to perform brute-force attacks and obtain the password used for HTTP, SSH, and Telnet services.

The following products are vulnerable:

3Com 3812
3Com 3870
EdgeCore ES4649
Dell PowerConnect 5224

Other products from multiple vendors that re-brand Accton switches may also be affected.

Accton-based Switches Backdoor Password Vulnerability

Attackers can exploit this issue using readily available tools.

The following exploit code is available:

• /data/vulnerabilities/exploits/42947.pl

Accton-based Switches Backdoor Password Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Accton-based Switches Backdoor Password Vulnerability

References:

• 3Com Homepage (3Com)
  
• Accton Homepage (Accton)
  
• Dell Homepage (Dell)
  
• EdgeCore Homepage (EdgeCore)
  
• Vendor Response to Backdoor in Accton Switches Post (C.K.NG )