http://forum.lowyat.net/ Wed, 01 Jul 2026 20:02:37 +0800 FeedCreator 1.7.2 http://forum.lowyat.net/topic/5417144 Fiberhome Router SR1041F RP0105 ssh root backdoor<br /><br />It is possible to login ssh as root user by exploiting remote code execution vulnerability<br /><a href='https://gist.github.com/whirleyes/c664c33ff0e0461692c1446f2a97abb9' target='_blank'>https://gist.github.com/whirleyes/c664c33ff...2c1446f2a97abb9</a> and backdoor factory access mode in dropbear<br /><br />Pre-authentication remote code execution allows anyone without logged in to send commands to the operating system as the root user.<br /><br /><b><span style='font-size:16pt;line-height:100%'>Thus, opening WAN port 80 could be unsafe for your network.<br /></span></b><br /><br />This scenario involves a sequence of commands:<br />1. Enable factory mode<br />2. Remove root password<br />3. Restart dropbear (allow no password and use /var/passwd instead of /var/dropbear_passwd)<br />4. Open firewall<br /><br /><b>SSH root backdoor execution</b><br /><a href='https://gist.github.com/whirleyes/7916c5cd03fa7d8c85aaceb2f50f837c' target='_blank'>https://gist.github.com/whirleyes/7916c5cd0...5aaceb2f50f837c</a><br /><br />Done submitting CVE. whirleyes Networks and Broadband Sun, 29 Oct 2023 22:54:48 +0800