CERT24Researchers discovered a hidden backdoor in 20 router models that enables remote root accessLoading data…

Researchers discovered a hidden backdoor in 20 router models that enables remote root access

VulnCheck researchers found a hidden backdoor named ENDLESSDOORS in 20 Zbtlink router models. It connects to a hardcoded server and allows commands received from that server to be executed with root privileges, including opening an interactive root shell. The vendor said the feature was intended for after-sales maintenance and was not meant for mass-produced devices.

← Back to intelligence

Researchers discovered a hidden backdoor in 20 router models that enables remote root access

VulnCheck researchers found a hidden backdoor named ENDLESSDOORS in 20 Zbtlink router models. It connects to a hardcoded server and allows commands received from that server to be executed with root privileges, including opening an interactive root shell. The vendor said the feature was intended for after-sales maintenance and was not meant for mass-produced devices.