Exploit and Detection Engineering

Answering one hardcoded address gives you root on 20+ Zbtlink router models

VulnCheck's ENDLESSDOORS ships enabled on more than 20 Zbtlink models and runs as root from boot, and because it opens no port at all, the check that would have caught it has to happen on the firmware image.