Hardcoded credentials

2022-09-0617:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.

CPENameOperatorVersion
a860r_firmwareeq4.1.2cu.5182-b20201027

CPE	Name	Operator	Version
	a860r_firmware	eq	4.1.2cu.5182-b20201027

References

github.com/1759134370/iot/blob/main/TOTOLINK/A860R/2.md