Zte光猫可真不安全

[qbladea]

手里有个宽带到期闲置的Zte光猫，拿telnet就能连上去了

username: root
password: Zte521

进去就是root权限
里面是Linux系统

CPU是MIPS的，运行的大端的程序 MSB 的:

/mnt/usb1_1 # ./busybox uname -a
Linux F660 3.4.11-rt19 #147 SMP PREEMPT Thu Oct 8 05:59:47 CST 2015 mips GNU/Linux 

system type             : 968380FHGU
processor               : 0
cpu model               : Broadcom BMIPS4350 V8.0
BogoMIPS                : 397.31
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 1
cpu model               : Broadcom BMIPS4350 V8.0
BogoMIPS                : 409.60
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

busybox: ELF 32-bit MSB executable, MIPS, MIPS32 version 1 (SYSV), statically linked, stripped