Austria: Standard password opens 7000 VDSL routing

Nextiva is a cloud based VoIP phone system, hosting lots of small and medium sized businesses nationwide. the provides UNLIMITED business calling for only $19.95 a month!! Click here for the detail about this promotion!!

heise on-line 28.05.2010 12:45 Quotation:

Those rout from 7000 customers with VDSL connections of the A1 Telekom Austria need new firmware. The original version permits accesses from the Internet with a uniform password. Always the update does not take place automatically. A1 Telekom Austria (TA) equips its VDSL customers with priority with modems of the type Pirelli PRGAV4202N. On these devices a SSH service in the originally delivered firmware version (ending on 25.5), which is attainable under the standard haven 22, runs. During input of the correct password one receives over it access with root rights. The password is alike with all this routing delivered by the TA. And the haven is open not only within the LANs, but also from the Internet attainable. Thus everyone, which knows the password, can do all concerned routs at will to manipulate.

Source and further here...