---
id: 7438
title: "Lỗ hổng trên dòng ONT IGate GW040"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/lo-hong-tren-dong-ont-igate-gw040/"
published_at: "2018-01-01T07:00:00Z"
tags: ["botnet", "command-injection", "iot-security", "router", "firmware-analysis", "tr-069", "binwalk"]
phying_url: "https://phying.com/item/7438"
lang: en
---

# Lỗ hổng trên dòng ONT IGate GW040

## Summary

Research on ONT IGate GW040 routers: the crontab and weakly secured TR-069 features allow easy botnet recruitment, and firmware analysis uncovered command injection in /bin/httpd via IPSec requests.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2018-01-01T07:00:00Z
- **Original:** https://blog.viettelcybersecurity.com/lo-hong-tren-dong-ont-igate-gw040/
- **Phying News:** https://phying.com/item/7438