China Telecom Reproduces Major Vulnerabilities, and Billions of User Information Can Be Checked
KaiVPS It was reported on November 1 that recently, the Butian Vulnerability Response Platform once again revealed a major vulnerability in a system of China Telecom. Through this vulnerability, hundreds of millions of users' information can be queried, involving names, ID numbers, balances, and operations such as recharging, account cancellation, and card replacement can be carried out at any amount. At 10:00 a.m. on October 29, the vulnerability was confirmed by the Chinese telecom manufacturer.
"It is not very difficult for hackers to find the entrance to this vulnerability. A relatively low weak password and ultra vires operation can access this system." Lin Wei, the person in charge of the Butian Vulnerability Response Platform, told reporters, "After entering the system, hackers found many high-risk vulnerabilities, and even could see the sensitive information of telecom users across the country."
"Because we have a lot of sensitive information about users, there are more people who like to dig holes in it," Lin Wei added.
Lin Wei said that generally, the manufacturer will complete the repair and give feedback on the day when the system vulnerability is confirmed. It is understood that China Telecom has shut down relevant servers.
