On DGN2200 in Modfs 0.2 and 0.3 versions sshd grant access with blank password!
It happens using "admin" and "nobody" as username.
Anyone with this issue?
Update:
Found this Googling:
Quote:"Be aware that, if I remember correctly, dropbear on DGN2200 has serious security issues: if you login with user "admin" and password empty it will let you access the busybox, as if you had typed the correct password."
On DGN2200 in Modfs 0.2 and 0.3 versions sshd grant access with blank password!
It happens using "admin" and "nobody" as username.
Anyone with this issue?
Update:
Found this Googling:
Quote:"Be aware that, if I remember correctly, dropbear on DGN2200 has serious security issues: if you login with user "admin" and password empty it will let you access the busybox, as if you had typed the correct password."
To read the whole discussion:
http://www.hwupgrade.it/forum/archive/index.php/t-2297494-p-23.html
Is this project abandoned? Any developer knows anything about?
Thanks for your work
Max
Last edit: Alex Pic 2013-03-04