Lucene search

K
cve[email protected]CVE-2022-36613
HistoryAug 29, 2022 - 12:15 a.m.

CVE-2022-36613

2022-08-2900:15:08
CWE-798
web.nvd.nist.gov
32
10
cve-2022-36613
totolink
n600r
hardcoded password
root
security vulnerability
cve
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.2%

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

Affected configurations

NVD
Node
totolinkn600r_firmwareMatch4.3.0cu.7647_b20210106
AND
totolinkn600rMatch-

Social References

More

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.2%

Related for CVE-2022-36613