Taiwan Authority: D-Link routers had Telnet backdoor

The Taiwanese IT authority TCERT/CC warns of a discovered vulnerability that makes it possible to break into D-Link routers with a backdoor that the manufacturer itself has not previously reported.

The Taiwan Computer Emergency Response Team/Coordination Center says in a warning that via LAN, attackers can force the router through the backdoor to activate telnet by visiting a specific URL. Attackers can then log in with admin rights.

The Taiwanese authority notified D-Link in April and the manufacturer on Sunday pushed an update to the affected routers. The manufacturer acknowledges the bug. D-Link advises users to check whether the automatic update has been installed.