Bloomberg ya sanar da gano yiwuwar kofa a cikin kayan aikin Huawei shekaru 8 da suka gabata

Bloomberg edition, bara aka buga
m hankali game da guntu ɗan leƙen asiri wanda ba a tabbatar da shi ba a cikin allunan Supermicro, ya bayyana game da gano kofa a cikin kayan aikin Huawei. Duk da haka, Vodafone, wanda ya gano matsalar, ya kira shi mai rauni, kuma Bloomberg yayi karin gishiri. A bayyane yake, ƙofar baya ba ta da gangan da aka ƙara tare da mugun nufi da leƙen asiri ba, amma sakamakon barin wurin samun damar aikin injiniya ne wanda aka manta ya zama naƙasasshe a sigar ƙarshe ta samfurin saboda dubawa ko don sauƙaƙe bincike ta hanyar sabis na tallafi.

Vodafone ya gano matsalar a cikin 2011 kuma Huawei ya gyara shi bayan an sanar da shi rashin lafiyar. Ma'anar bayan gida shine ikon samun damar shiga na'urar ta hanyar ginanniyar sabar telnet. Ba a bayar da cikakkun bayanai game da ƙungiyar shiga ba; ba a bayyana ko an kunna damar shiga ta hanyar kalmar sirrin injiniya da aka riga aka ƙayyade ko kuma an ƙaddamar da sabar telnet lokacin da wani abu ya faru (misali, lokacin da aka aika wasu jerin fakitin cibiyar sadarwa). Ya kamata a lura cewa irin wannan "kofofin baya" waɗanda ke ba da damar haɗi ta hanyar telnet kuma an gano su a cikin kayan aiki a cikin 'yan shekarun nan. Cisco, Moxa, Asus, ZTE, D-Link и Juniper.

Bayan gyara matsalar, injiniyoyin Vodafone sun lura cewa ba a cire ikon shiga cikin nesa gaba ɗaya ba kuma har yanzu ana iya fara sabar telnet (ba a bayyana abin da ake nufi da ƙin cire sabar telnet gaba ɗaya daga firmware ba ko barin ikon. don farawa a ƙarƙashin wasu sharuɗɗa). Huawei yayi sharhi game da samun damar shiga ta hanyar telnet tare da buƙatun samarwa - ana amfani da wannan sabis ɗin don gwaji da daidaitawar na'urori na farko. A lokaci guda, Huawei ya aiwatar da ikon kashe sabis ɗin bayan kammala wannan matakin, amma lambar sabis ɗin telnet kanta ba a cire shi daga firmware ba.

source: budenet.ru