SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack

[li_xiang]

I am a security researcher from Baidu，Recently, we have detected a large number of hacking incidents from ddos attacks initiated on the UDP9001 port on the SmartZone-100 device. Great harm!!!

Refer to my screenshot for details.my phone number is 18903860673

My email address is 18903860673@163.com， I come from Baidu in China，Hope you guys get back to me as soon as possible，

[Anonymous]

@li_xiang, Yes, we have ES Service deployed on SZ. If you run "Show service" from CLI, should be able to see the status.

Regards,

Parikshith

[li_xiang]

@parikshith_nagaraj_aa0004  udp9001 is filebeat plugin？？？

[li_xiang]

@parikshith_nagaraj_aa0004 could you tell me the Software version of filebeat？

[syamantakomer]

Hi Li,

Our security team has been notified to review this.

[li_xiang]

@syamantak_omer could you tell me 9001 is filebeat service???