£3 Wi-Fi Extender Exposed With Hidden Admin Account
A security researcher has discovered a £3 Wi-Fi extender bought through Temu has a hidden administrator account with a fixed password, putting users' security at risk
A £3 Wi-Fi extender purchased through online retailer Temu has been found to have significant security issues, including a hidden administrator account with a fixed password that cannot be changed. The device, which uses a MediaTek MT7620 processor, was examined by security researcher Keiran Smith, who discovered the security flaws.
The hidden administrator account has complete control over the device's functions and uses a fixed password embedded in the software. This means that every unit of the Wi-Fi extender using the same firmware has the same concealed administrator password. Changing the normal administrator password does not remove the hidden access, leaving users vulnerable to security risks.
The Wi-Fi extender also has a remote login service that accepts the concealed credentials without requiring physical access to the device. This raises concerns about the safety of cheap connected devices, as the password is a compile-time constant, identical on every unit ever sold.
## What's at risk The discovery of the security issues with the £3 Wi-Fi extender challenges the idea of cheap connected devices being simple bargains. The fact that the device has a hidden administrator account with a fixed password puts users' security at risk, as it can be accessed remotely without their knowledge or consent.
## Why it matters The security flaws found in the £3 Wi-Fi extender are a concern for anyone who uses cheap connected devices. As more devices become connected to the internet, the risk of security breaches increases. The discovery of a hidden administrator account with a fixed password on a device that can be purchased for just £3 highlights the need for consumers to be aware of the potential security risks associated with cheap connected devices.
The researcher's findings serve as a reminder to be cautious when purchasing cheap connected devices, as they may not always be secure. As the use of connected devices continues to grow, it is essential to prioritize security and ensure that devices are properly vetted before they are released to the market.
