CVE-2022-40111

creationtimestamp| type| source ---|---|--- 2022-09-06 20:13:18+00:00| seen| https://t.me/cibsecurity/49311...

CVE-2022-40111

CVE-2022-40111 affects the TOTOLINK A3002R firmware (TOTOLINK-A3002R-He-V1.1.1-B20200824.0128). The issue is that, in the shadow.sample file, the root user is hardcoded in the firmware, enabling severe unauthorized access potential. The vendor-focused PT-2022-25214 report corroborates the shadow....