Sitecom WLM-3500 Backdoor Accounts Authentication Bypass vulnerability

This host is running Sitecom WLM-3500 Router and is prone to authentication bypass vulnerability.

Sitecom WLM-3500 routers contain an undocumented access backdoor that can be abused to bypass existing authentication mechanisms. These hard-coded accounts are persistently stored inside the device firmware image. Despite these users cannot access all the pages of the web interface, they can still access page '/romfile.cfg', the (clear-text) configuration file of the device that contains, among the other things, also the password for the 'admin' user. Thus, escalating to administrative privileges is trivial.

Sitecom WLM-3500, firmware versions < 1.07

Upgrade to Sitecom WLM-3500, firmware versions 1.07 or later.