Expert finds this 3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you'd hoped for

Date:
Sun, 13 Sep 2026 10:05:00 +0000

Description:
A 3 Temu Wi-Fi extender contained hidden administrator access, shared credentials, remote login capabilities, command injection, and weak update protection.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter A 3 Wi-Fi extender carried hidden administrator access beyond ordinary user controls Every device
running the firmware shared the same concealed administrator password
Changing the visible administrator password could not disable the secret account A 3 Wi-Fi extender bought through Temu has exposed security problems that challenge the idea of cheap connected devices being simple bargains.

Security researcher Keiran Smith examined the device and discovered hidden access features that ordinary users would never see during normal operation. Smith, who holds a penetration-testing certification, picked up the six-antenna extender after seeing it promoted through a targeted ad on the shopping app. Latest Videos From TechRadar Watch full video here: The cheap extender contained access users could not control The examination began with the hardware, where he identified a MediaTek MT7620 processor commonly used
in low-cost networking products.

After extracting the firmware stored inside the device, Smith found a hidden administrator account with complete control over its functions. You may like These popular Tenda routers have an unpatched security backdoor which could give hackers access Another top router maker accused of firmware having backdoors Chinese giant Zbtlink halts downloads to fix issue Wi-Fi devices could 'quietly identify' people with nearly 100% accuracy

The account used a fixed password embedded inside the software, meaning every unit using that firmware carried the same credentials.

Changing the normal administrator password through the device settings would not remove this separate hidden access. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Smith also found a remote login service that accepted the concealed credentials without requiring physical access to the extender itself.

Its worth being precise about what makes this as bad as it is, because hardcoded password covers a wide range of sins, Smith said

The researcher said this case was more serious because the password remained identical across devices rather than being generated individually. What to read next This 30 TP-Link travel router deal fixes bad Wi-Fi on business
trips HP warns hackers are turning popular remote access tools into
dangerous, stealthy backdoors TP-Link router owners update now 15 flaws patched to stop hackers hijacking your devices

A default credential is something the owner can see, is told about and can change, he said. What we have here is the opposite on every count.

This one is a compile-time constant rather than something derived from the
MAC address or serial number, so it is identical on every unit ever sold.

The combination of hidden access, unchanged credentials, and remote availability creates a security concern for ordinary owners.

Even if technically skilled users discovered the account, Smith found that changes could disappear after restarting the extender. Additional flaws raise questions about cheap connected hardware The investigation also uncovered a command injection weakness that could allow attackers to execute unauthorized instructions through the device.

Smith found that the extender lacked strong protection around software updates, creating possible opportunities for tampered firmware installation.

He admitted that these issues did not prove that manufacturers intentionally created unsafe features for malicious purposes.

They could have originated from factory testing processes and remained active accidentally before consumer sales.

This Temu extender shows how extremely cheap smart devices can create
security challenges beyond their purchase price.

Consumers may focus on immediate savings while having little visibility into the software decisions built inside connected equipment.

The findings do not mean every inexpensive networking device contains similar weaknesses, though they show why basic security checks matter.

As more homes add connected products, hidden software features could become a larger concern for users and manufacturers.

Via CyberNews Follow TechRadar on Google News and add us as a preferred
source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/expert-finds-this-gbp3-temu-wi-fi-extender-is-fu ll-of-security-issues-and-definitely-not-the-bargain-youd-hoped-for


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)