CVE-2022-40111

CVE-2022-40111 affects the TOTOLINK A3002R firmware (TOTOLINK-A3002R-He-V1.1.1-B20200824.0128). The issue is that, in the shadow.sample file, the root user is hardcoded in the firmware, enabling severe unauthorized access potential. The vendor-focused PT-2022-25214 report corroborates the shadow....