CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

CVE-2022-29644

creationtimestamp| type| source ---|---|--- 2022-05-18 16:28:33+00:00| seen| https://t.me/cibsecurity/42897...

CVE-2022-29644

CVE-2022-29644 affects TOTOLINK A3100R devices (firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The issue is a hard-coded password for the Telnet service stored in the component /web_cste/cgi-bin/product.ini, creating an unauthenticated control risk over the device. The NV...