Xmlset roodkcableoj28840ybtide

From TechInfoDepot
Jump to navigationJump to search
  • xmlset_roodkcableoj28840ybtide is a known backdoor on some Alpha Networks
(originally D-Link's R&D + manufacturing division, they spun off in 2003) manufactured products.
  • It is enough to change browser’s user agent string to “xmlset_roodkcableoj28840ybtide” (no quotes),
to access the web interface without any authentication and view/change the device settings.
If you read this string backwards you will get: edit by 048820 joel backdoor.

Affected devices

Affected devices would all seem to be using Realtek RTL86xx SoCs.

Confirmed

Possibly (via Shodan search for the thttpd build used)

Known Alpha RTL86xx devices in the DB

 TypeCPU1 modelFlashRAMExpansion IFsRadio1 modelDefault IPDefault userDefault pass
D-Link DI-524UPwireless router
print server
RTL8650B4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />USB 1.1RTL8185L
D-Link DI-604UProuter
print server
RTL8650BUSB 1.1192.168.0.1admin
D-Link DI-624S rev B1wireless routerRTL8651B4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />USB 2.0
Mini PCI
AR2414
D-Link DIR-100 rev ArouterRTL8650B2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />USB 1.1
D-Link DIR-120 rev A1routerRTL8650B4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />USB 2.0192.168.0.1admin
D-Link TM-G5240wireless routerRTL8650B4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />Mini PCIAR2413192.168.0.1admin
Planex BRL-04CW-Urouter
print server
RTL8650B2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />USB 1.1192.168.1.1adminpassword
Planex BRL-04RrouterRTL8650B2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />none specified192.168.1.1
Planex BRL-04URrouter
print server
RTL8650B2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />USB 1.1192.168.1.1admin0000

Discussion