Lucene search

CVE-2024-35396

🗓️ 24 May 2024 16:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

TOTOLINK CP900L v4.1.5cu.798_B20221228 hardcoded telnet password vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
RedhatCVE	CVE-2024-35396	13 Feb 202523:30	–	redhatcve
Cvelist	CVE-2024-35396	24 May 202415:54	–	cvelist
Vulnrichment	CVE-2024-35396	24 May 202415:54	–	vulnrichment
NVD	CVE-2024-35396	24 May 202416:15	–	nvd

Nvd

Node

totolink cp900l_firmwareMatch4.1.5cu.798_b20221228

AND

totolink cp900lMatch-

Source	Link
totolink	www.totolink.com/
github	www.github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/README.md

Parameter	Position	Path	Description	CWE
password	path	/web_cste/cgi-bin/product.ini	Hardcoded password exposure for telnet allowing root access.	CWE-284, CWE-798

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2024 16:15Current

7.4High risk

Vulners AI Score7.4

CVSS39.8

EPSS0.00171

SSVC