CVE-2022-36616

TOTOLINK A810R V4.1.2cu.5182B20201026 and V5.9c.4050B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36616

CVE-2022-36616 affects TOTOLINK A810R routers (firmware versions V4.1.2cu.5182_B20201026 through V5.9c.4050_B20190424). The issue is a hardcoded root password stored in /etc/shadow.sample, enabling local privilege escalation if an attacker gains access to the device. Connected sources corroborate...