CVE-2014-7279: The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP…

PriorityP268critical9.8CVSS 3.0

AVNACLPRNUINSUCHIHAH

EXPLOIT

EPSS

11.74%

95.5th percentile

The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
kankunit	konke_smart_plug_firmware	—	—

Detection & IOCsextracted from sources · hover to see the quote

commandreboot↗

→Detect unauthenticated inbound TCP connections to port 23 (Telnet) on Konke Smart Plug K devices; any successful Telnet session requires no credentials and grants root access. ↗
→Scan or monitor for devices exposing TCP port 23 (Telnet) on the network; use nmap to identify Konke Smart Plug K devices with open port 23 as a discovery step used by attackers. ↗

·The device runs OpenWrt with BusyBox, meaning a successful attacker has access to a full BusyBox toolset as root — scope of post-exploitation is broad. ↗
·No authentication whatsoever is required for the Telnet service; there is no password prompt to bypass — the session grants root immediately upon connection. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.