Researchers discovered a hidden backdoor in 20 router models that enables remote root access
VulnCheck researchers found a hidden backdoor named ENDLESSDOORS in 20 Zbtlink router models. It connects to a hardcoded server and allows commands received from that server to be executed with root privileges, including opening an interactive root shell. The vendor said the feature was intended for after-sales maintenance and was not meant for mass-produced devices.
CERT24