ID

VAR-201503-0497


TITLE

"Suspected Backdoor" program in NetCore's full range of routers

Trust: 0.6

sources: CNVD: CNVD-2015-07800

DESCRIPTION

Netcore is a network communication manufacturer in Shenzhen Leike. Its main products include wireless routers, wireless network cards, network cards, hubs, switches, broadband routers, Layer 2, and Layer 4 switches, and optical terminals. A program called IGDPDTD is built into the NetCore router. According to its description, it should be IGD MPT Interface daemon 1.0. The program will start with the router and open the port on the public network. The attacker can execute any system command, upload and download files, and control the router.

Trust: 0.6

sources: CNVD: CNVD-2015-07800

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2015-07800

AFFECTED PRODUCTS

vendor:netcoremodel:nw774scope: - version: -

Trust: 0.6

vendor:netcoremodel:igdmptdscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2015-07800

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2015-07800
value: HIGH

Trust: 0.6

CNVD: CNVD-2015-07800
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2015-07800

PATCH

title:There are suspected backdoors on the Netcore routerurl:https://www.cnvd.org.cn/patchinfo/show/54928

Trust: 0.6

sources: CNVD: CNVD-2015-07800

EXTERNAL IDS

db:CNVDid:CNVD-2015-07800

Trust: 0.6

sources: CNVD: CNVD-2015-07800

REFERENCES

url:http://card.weibo.com/article/h5/s?from=groupmessage&isappinstalled=1#cid

Trust: 0.6

sources: CNVD: CNVD-2015-07800

SOURCES

db:CNVDid:CNVD-2015-07800

LAST UPDATE DATE

2022-05-04T09:44:06.861000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2015-07800date:2015-11-27T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2015-07800date:2015-03-19T00:00:00