Anyone running C-Data OLTs?

Fri Jul 10 19:21:26 UTC 2020

Um, from the article it appears that this isn’t on the Management interface, but the WAN port of the OLT.

Owen

> On Jul 10, 2020, at 11:01 , Mel Beckman <mel at beckman.org> wrote:
> 
> But who, who I ask, opens their management interface to the public Internet?!?!
> 
> Maybe this is vulnerability if you have a compromised management network, but anybody who opens CPE up to the Internet is just barking mad :-)
> 
> -mel via cell
> 
>> On Jul 10, 2020, at 10:00 AM, Owen DeLong <owen at delong.com> wrote:
>> 
>>  https://www.zdnet.com/article/backdoor-accounts-discovered-in-29-ftth-devices-from-chinese-vendor-c-data/?ftag=TRE-03-10aaa6b&bhid=29077120342825113007211255328545&mid=12920625&cid=2211510872 <https://www.zdnet.com/article/backdoor-accounts-discovered-in-29-ftth-devices-from-chinese-vendor-c-data/?ftag=TRE-03-10aaa6b&bhid=29077120342825113007211255328545&mid=12920625&cid=2211510872>
>> 
>> Wow… Just wow.
>> 
>> Owen
>> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20200710/0c83cf62/attachment.html>