ID: INFO-16

Title: Debug kernel threads present in production firmware

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: Two kernel threads named telnetDBGD and acktelnetDBGD were identified in the running process list, suggesting a debug telnet interface is compiled directly into the production kernel. No corresponding open TCP port was identified, so the interface does not appear to be externally accessible under normal conditions. However, the purpose of these threads and the conditions under which they activate have not been fully determined. The presence of debug facilities in a production release is a hardening concern, as such interfaces may expose functionality not intended for end users.

Remediation: Remove debug interfaces from production firmware builds. If debug capability is required for support purposes, gate it behind a documented, authenticated mechanism and ensure it is disabled by default.

More information: See System Hardening Analysis chapter.