CVE-2017-8771: On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default...

Security readout for executives and security teams

CVE-2017-8771 describes BE126 WIFI repeater 1.0 devices shipping with telnet open by default and root/root credentials. A connected user can be tricked into clicking a malicious link that abuses this access and can lead to malicious code on the repeater. The source bundle names no vendor patch or CVSS score. Exposure is likely limited to BE126 WIFI repeater 1.0 devices still using factory telnet settings. Risk is highest where untrusted users connect through the repeater or where management access is not isolated. The source bundle does not confirm broader product families, internet exposure, or affected firmware beyond version 1.0. Prioritize replacement or isolation if these repeaters exist in business networks. The issue is old, low in metadata quality, and not KEV-listed, but default root telnet on network equipment creates meaningful compromise risk with limited operational effort to reduce exposure. Mitigation focus: Check vendor or reseller guidance; the source bundle names no patch.; If supported, disable telnet on affected repeaters.; Change default root credentials if the device permits it..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.