What’s Vulnerable › Vulnerabilities

CVE-2019-8950

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-02-20 · updated 2026-06-17
• Weakness: CWE-798

Description

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.

Affected products

• Dasannetworks H665 Firmware: 1.46p1-0028

References

• https://blog.burghardt.pl/2019/02/dasan-h665-has-vendor-backdoor-built-into-busyboxs-bin-login/
• https://seclists.org/bugtraq/2019/Feb/32
• https://blog.burghardt.pl/2019/02/dasan-h665-has-vendor-backdoor-built-into-busyboxs-bin-login/
• https://seclists.org/bugtraq/2019/Feb/32

Get alerted when CVE-2019-8950 or the next vulnerability affects your stack