Skip to content
OpenAdvisories
High · 8.4 CVE-2025-1143 EUVD-2025-2018

Billion Electric M120N - Use of Hard-coded Credentials

Published Feb 11, 2025 · Updated Feb 18, 2025 · Assigned by twcert

Vendor: Billion Electric Product: M100 Product: M120N Product: M150 Product: M500

Description

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.

Affected products

VendorProductAffectedFixed
Billion Electric M100 1.04.1.159.* – < 1.04.1.592.10, 1.04.1.613.* – < 1.04.1.613.14, 1.04.1.* – < 1.04.1.676 1.04.1.592.10
Billion Electric M150 1.04.1.592.* – < 1.04.1.592.10, 1.04.1.613.* – < 1.04.1.613.14, 1.04.1.* – < 1.04.1.676 1.04.1.592.10
Billion Electric M120N 1.04.1.592.* – < 1.04.1.592.10, 1.04.1.613.* – < 1.04.1.613.14, 1.04.1.* – < 1.04.1.676 1.04.1.592.10
Billion Electric M500 1.04.1.592.* – < 1.04.1.592.10, 1.04.1.613.* – < 1.04.1.613.14, 1.04.1.* – < 1.04.1.676 1.04.1.592.10

References