CommScope RUCKUS Community Forums

li_xiang · 07-05-2021

I am a security researcher from Baidu，Recently, we have detected a large number of hacking incidents from ddos attacks initiated on the UDP9001 port on the SmartZone-100 device. Great harm!!! Refer to my screenshot for details.my phone number is 1890...

li_xiang · 07-06-2021

@allan_grohe Yes, we can access ip and port through UDP protocol and receive excessive response packets. Can you tell me what service is opened on port 9001? It should not be es, but filebeat? What is the specific service?

li_xiang · 07-06-2021

@syamantak_omer could you tell me 9001 is filebeat service???

li_xiang · 07-06-2021

@parikshith_nagaraj_aa0004 could you tell me the Software version of filebeat？

li_xiang · 07-06-2021

@parikshith_nagaraj_aa0004 udp9001 is filebeat plugin？？？

li_xiang · 07-05-2021

@parikshith_nagaraj_aa0004 Is the ES deployed on SZ an ES service or a plug-in

CommScope RUCKUS Community Forums

User Statistics

User Activity

SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack

Re: SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack

Re: SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack

Re: SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack

Re: SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack

Re: SmartZone-100 product has security vulnerabilities.Hackers can use udp9001 port to launch ddos reflection amplification attack