critical9.8Public exploit code
CVE-2014-7279
The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP tr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Konke Smart Plug K - Authentication Bypass2014-10-29 · remote · hardware
Impact
The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kankunit | Konke Smart Plug Firmware | Version k |