CVE-2023-22906

Summary

CVE-2023-22906 is a vulnerability affecting Hero Qubo HCD01_02_V1.38_20220125 devices. The issue allows unauthenticated remote access to the device with root privileges through TELNET, which is enabled by default and doesn't require a password. This poses a significant risk as an attacker can gain full control over the device, potentially leading to data theft, unauthorized changes, or other malicious activities. To mitigate this risk, users are advised to disable TELNET access, change default credentials, or apply the latest security patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.