Security Researchers have discovered a backdoor in iOT devices from a Chinese vendor which that vendor has turned death ear about.
According to a security firm TrusWave, the backdoor has been discovered in almost all devices produced by VoIP specialist dbltek. According to the researchers, the backdoor was built purposely for the vendors use.
Trustwave claims the vendor then cut off contact with it. The security firm says it has since been able to write exploits that open both the old and new backdoors.
The vulnerable firmware is present in almost all dbltek GSM-to-VoIP devices, a range of equipment mostly used by small to medium size businesses, it claims. Trustwave researchers claimed they had found hundreds of vulnerable devices on the internet.
El Reg invited dbltek to respond to Trustwave’s accusations on Wednesday but we’ve yet to hear back from the manufacturer. We’ll update this story as and when we hear more.
Trustwave went public with its findings on Thursday.
source : theregister