China-made ZBT routers ship with two backdoor implants giving unauthenticated attackers root access

VulnCheck identified two previously undocumented factory implants, SPEAKINGSTONE and DARKLANTERN, in firmware for routers made by Shenzhen Zhibotong Electronics (ZBT). Both can enable an unauthenticated remote attacker to run commands as root on affected devices.