The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain “quipment management authority” via TCP traffic to port 23.