1378 matches found
CVE-2022-36616
TOTOLINK A810R V4.1.2cu.5182B20201026 and V5.9c.4050B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
CVE-2022-36611
TOTOLINK A800R V4.1.2cu.5137B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
Hardcoded credentials
TOTOLINK A3000RU V4.1.2cu.5185B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
Hardcoded credentials
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
CVE-2022-36614
CVE-2022-36614 affects TOTOLINK A860R, specifically V4.1.2cu.5182_B20201027, which is disclosed to contain a hardcoded root password in /etc/shadow.sample. The available connected documents confirm the affected product and the root-cause (hardcoded credential) but do not provide a documented fix/...
CVE-2022-36612
TOTOLINK A950RG V4.1.2cu.5204B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
CVE-2022-36613
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
CVE-2022-36612
CVE-2022-36612 affects TOTOLINK A950RG with firmware 4.1.2cu.5204_B20210112. The issue is a hardcoded root password stored in /etc/shadow.sample, enabling local access with high impact (confidentiality, integrity, availability). Exploitation details are not provided in the documents; no official ...
CVE-2022-36611
TOTOLINK A800R V4.1.2cu.5137B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample...
CVE-2022-38557
D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...
Directory traversal
Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...
Directory traversal
D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...
CVE-2022-38556
Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...
CVE-2022-38557
D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh...
CVE-2022-36524
D-Link GO-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh...
CVE-2022-36524
The CVE-2022-36524 entry concerns D-Link GO-RT-AC750 routers (GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02). Affected component/entry point is the init script /etc/init0.d/S80telnetd.sh, enabling static default credentials. This creates a network-accessible risk vector with high impact t...
CVE-2022-35491
TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample...
CVE-2022-35491
CVE-2022-35491 affects TOTOLINK A3002RU V3.0.0-B20220304.1804, with a hardcoded root password stored in /etc/shadow.sample. This is corroborated by multiple connected sources (NVD entry, Red Hat advisory, CNNVD, PRION) and confirms a high-severity issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H...