xmlset roodkcableoj28840ybtide

From WikiDevi
Jump to: navigation, search

xmlset_roodkcableoj28840ybtide is a known backdoor on some Alpha Networks (originally D-Link's R&D + manufacturing division, they spun off in 2003) manufactured products.

It is enough to change browser’s user agent string to “xmlset_roodkcableoj28840ybtide” (no quotes), to access the web interface without any authentication and view/change the device settings.

If you read this string backwards you will get: edit by 048820 joel backdoor.

More information is available on /dev/ttyS0 (Reverse Engineering a D-Link Backdoor).

Contents

[edit] Affected devices

Affected devices would all seem to be using Realtek RTL86xx SoCs.

[edit] Confirmed

[edit] Possibly (via Shodan search for the thttpd build used)

[edit] Known Alpha RTL86xx devices in the DB

 TypeCPU1 modelFlashRAMExpansion IFsWI1Default IPDefault HTTPadmin userDefault HTTPadmin pass
D-Link DI-524UPwireless router
print server
RTL8650B4 MiB4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
16 MiB16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
USB 1.1RTL8185L
D-Link DI-604UProuter
print server
RTL8650BUSB 1.1192.168.0.1admin
D-Link DI-624S rev B1wireless routerRTL8651B4 MiB4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
32 MiB33,554,432 B
262,144 Kib
32,768 KiB
256 Mib
0.0313 GiB
USB 2.0
Mini PCI
AR2414
D-Link DIR-100 rev ArouterRTL8650B2 MiB2,097,152 B
16,384 Kib
2,048 KiB
16 Mib
0.00195 GiB
16 MiB16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
USB 1.1
D-Link DIR-120 rev A1routerRTL8650B4 MiB4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
16 MiB16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
USB 2.0192.168.0.1admin
D-Link TM-G5240wireless routerRTL8650B4 MiB4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
16 MiB16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
Mini PCIAR2413192.168.0.1admin
Planex BRL-04CW-Urouter
print server
RTL8650B2 MiB2,097,152 B
16,384 Kib
2,048 KiB
16 Mib
0.00195 GiB
16 MiB16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
USB 1.1192.168.1.1adminpassword
Planex BRL-04URrouter
print server
RTL8650B2 MiB2,097,152 B
16,384 Kib
2,048 KiB
16 Mib
0.00195 GiB
16 MiB16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
USB 1.1192.168.1.1admin0000

[edit] Discussion