Hardcoded credentials

TOTOLINK A950RG V4.1.2cu.5204B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Seiko Solutions SkyBridge MB-A200 信任管理问题漏洞

The Seiko Solutions SkyBridge MB-A200 is a multi-carrier LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A200 version v01.00.04 and earlier versions, which originates from multiple hardcoded passwords containing root...

CVE-2022-36616

TOTOLINK A810R V4.1.2cu.5182B20201026 and V5.9c.4050B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36615

CVE-2022-36615 affects TOTOLINK A3000RU v4.1.2cu.5185_B20201128, where a hardcoded root password exists in /etc/shadow.sample. Documented by NVD and Red Hat, the vulnerability enables local, high-impact compromise with root access if exploited. Connected sources confirm the device model and firmw...

CVE-2022-36615

TOTOLINK A3000RU V4.1.2cu.5185B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36616

CVE-2022-36616 affects TOTOLINK A810R routers (firmware versions V4.1.2cu.5182_B20201026 through V5.9c.4050_B20190424). The issue is a hardcoded root password stored in /etc/shadow.sample, enabling local privilege escalation if an attacker gains access to the device. Connected sources corroborate...

CVE-2022-36614

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36614

CVE-2022-36614 affects TOTOLINK A860R, specifically V4.1.2cu.5182_B20201027, which is disclosed to contain a hardcoded root password in /etc/shadow.sample. The available connected documents confirm the affected product and the root-cause (hardcoded credential) but do not provide a documented fix/...

CVE-2022-36613

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36613

Summary of CVE-2022-36613 : Affects TOTOLINK N600R with version 4.3.0cu.7647_B20210106. The issue is a hardcoded root password stored in /etc/shadow.sample, enabling potential local unauthorized access. The CWE/underlying root cause is the presence of a built-in credential rather than a runtime m...

CVE-2022-36612

TOTOLINK A950RG V4.1.2cu.5204B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36612

CVE-2022-36612 affects TOTOLINK A950RG with firmware 4.1.2cu.5204_B20210112. The issue is a hardcoded root password stored in /etc/shadow.sample, enabling local access with high impact (confidentiality, integrity, availability). Exploitation details are not provided in the documents; no official ...

CVE-2022-36611

TOTOLINK A800R V4.1.2cu.5137B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36611

TOTOLINK A800R V4.1.2cu.5137_B20200730 is affected by a hardcoded root password in /etc/shadow.sample. CVE-2022-36611 has a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact) with local access required and simultaneous high confidentiality, integrity, and availability impacts. The issue is document...

CVE-2022-36610

CVE-2022-36610 affects TOTOLINK A720R, specifically version 4.1.5cu.532_B20210610, which reportedly contains a hardcoded root password in /etc/shadow.sample. The root cause is a hardcoded credential embedded in the device image, enabling local unauthorized access if exploited. Impact is described...

CVE-2022-36610

TOTOLINK A720R V4.1.5cu.532B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

PT-2022-4464 · Totolink · Totolink A810R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A810R versions V4.1.2cu.5182 B20201026 through V5.9c.4050 B20190424 Description: The issue is related to a hardcoded password for the root user at /etc/shadow.sample. This could allow a remote attacker to elevate their privileges. Th...

TOTOLINK A810R 信任管理问题漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A810R versions V4.1.2cu.5182B20201026 and V5.9c.4050B20190424, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

TOTOLINK A3000RU 信任管理问题漏洞

The TOTOLINK A3000Ru is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3000RU version V4.1.2cu.5185B20201128, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

PT-2022-23505 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...