He doesn't demonstrate an attack over the internet in this article, but this makes me think he did investigate it from a remote attacker perspective vs. local n

He doesn't demonstrate an attack over the internet in this article, but this makes me think he did investigate it from a remote attacker perspective vs. local network: >So what does that get us from the perspective of a remote attacker? We have the ability to get the current admin credentials, and we can get a shell if the telnet binary is started. However, most remote attackers wont be able to solder on any wires, so I wasn’t going to stop there. >Going through the rest of the pages in the www directory, there is another web page that provides this interface: So you don't need telnet, but the creds being on the page + knowledge of the system command page would be enough to do whatever you wanted. Also see this follow-up research page on the same devices: https://james-clee.com/2020/04/23/more-information-disclosure-in-wavlink-devices/ https://james-clee.com/2020/04/23/more-information-disclosur... >Just a reminder – every screenshot below is of a web page that is externally accessible without requiring authentication and contains sensitive data.