Tengda vro discovers Backdoor

After a backdoor was found on the D-Link router, the security researcher found a backdoor in Tenda, another router manufacturer. The security researchers analyzed the latest firmware of W302R on the Tenda router and found an independent thread named MfgThread. It bundled port 7329 to receive UDP packets and will respond to commands containing special characters, these special characters include e, 1, and X. For e, a predefined string is returned, which is basically a ping test. For 1, it allows you to run the iwpriv command. The iwpriv command can be used to configure the vro network port. For X, it gives you root permission and can execute any command.

The author believes that this backdoor may first be implemented on the W302R router of tengda, and exists in the router MWN-WAPR150N of the W330R router and Medialink router.