Scan finds 61 internet-facing rConfig instances, raising network-control plane exposure concerns

rConfig, a tool for managing network device configurations, presents a web interface that acts as a control point over routers, switches, firewalls, and their stored credentials. Count-only searches on ZoomEye in November 2026 returned 61 assets matching its application fingerprint, 3,121 matching its page title, and a far larger number for a broad body-text query. The author notes that the application fingerprint is the most reliable indicator, while the title and body counts include unrelated pages and mentions. The article also cites vendor features such as role-based access, API tokens, and a Redis-backed queue, arguing that a reachable instance can expose more than a login page. It recommends inventorying all deployments, reviewing roles and API permissions, and confirming that management interfaces and Redis are not exposed, especially in light of a reported unauthenticated queue-poisoning vulnerability.