CVE-2017-8772: On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default...

Security readout for executives and security teams

CVE-2017-8772 describes BE126 WIFI repeater 1.0 devices shipping with Telnet open by default and root access using default credentials. Anyone who can reach that management service may gain full control of the device, including reading files, changing files, or running code. Exposure is likely limited to BE126 WIFI repeater 1.0 devices where Telnet is reachable from local, guest, upstream, or internet-facing networks. Asset identification may be difficult because the CVE record lists affected vendor and product as n/a. Treat this as a high-priority legacy device exposure. The business risk is full compromise of an affected network device, especially if Telnet is reachable beyond a tightly controlled management network. Prioritize inventory, isolation, and replacement decisions. Mitigation focus: Inventory for BE126 WIFI repeater 1.0 devices in all networks.; Check vendor guidance for firmware, configuration, or replacement options.; Remove internet or untrusted-network reachability to Telnet management..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.