Re: Not just Web UI
Whilst the admin access requirement has already been noted, this makes this a lot worse by extending the window of opportunity.
Someone who only has access to the devices for a short period of time can compromise them forever, not just the duration of their (legitimate) access.
My world just got a lot more complicated. If this starts getting exploited I can see people switching to more secure Chinese kit :)
Biting the hand that feeds IT
