Critical Vulnerabilities Exposed in French Fiber Optic Networks: Easy Access to Anonymous 1Gbps Internet

2025-01-05

Researcher Pierre Kim revealed critical security flaws in France's SFR, Orange, and Bouygues Telecom GPON FTTH fiber optic networks. These vulnerabilities allow attackers to easily gain high-speed anonymous internet access through physical access to fiber optic splitters or by exploiting default credentials and remote code execution vulnerabilities in ONT/ONU devices. Orange, after receiving vulnerability reports, acknowledged the flaws after months of communication. The research highlights the importance of physical security and secure device configurations in FTTH networks, underscoring shortcomings in IoT device security.

Read more