"Backdoors Identified in C-Data Fiber Broadband Devices"

Security researchers have identified backdoors in 29 C-Data Fiber-To-The-Home (FTTH) Optical Line Terminal (OLT) devices. According to the researchers, an attacker can extract administrator credentials via the command-line interface (CLI) if they have backdoor access to the OLT. Through the abuse of CLI access, an attacker can execute commands as root and exfiltrate information using the embedded web server. The vulnerabilities could also allow attackers to steal web and telnet credentials, as well as SNMP communities without authentication. This article continues to discuss the backdoors found in C-Data fiber broadband devices and what the exploitation of these backdoors could allow attackers to do. 

Security Week reports "Backdoors Identified in C-Data Fiber Broadband Devices"