Hardcoded credentials

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Hardcoded credentials

TOTOLINK A3000RU V4.1.2cu.5185B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Hardcoded credentials

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Hardcoded credentials

TOTOLINK A950RG V4.1.2cu.5204B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Hardcoded credentials

TOTOLINK A800R V4.1.2cu.5137B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Hardcoded credentials

TOTOLINK A810R V4.1.2cu.5182B20201026 and V5.9c.4050B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Hardcoded credentials

TOTOLINK A720R V4.1.5cu.532B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Seiko Solutions SkyBridge MB-A200 信任管理问题漏洞

The Seiko Solutions SkyBridge MB-A200 is a multi-carrier LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A200 version v01.00.04 and earlier versions, which originates from multiple hardcoded passwords containing root...

CVE-2022-36615

TOTOLINK A3000RU V4.1.2cu.5185B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36615

CVE-2022-36615 affects TOTOLINK A3000RU v4.1.2cu.5185_B20201128, where a hardcoded root password exists in /etc/shadow.sample. Documented by NVD and Red Hat, the vulnerability enables local, high-impact compromise with root access if exploited. Connected sources confirm the device model and firmw...

CVE-2022-36616

CVE-2022-36616 affects TOTOLINK A810R routers (firmware versions V4.1.2cu.5182_B20201026 through V5.9c.4050_B20190424). The issue is a hardcoded root password stored in /etc/shadow.sample, enabling local privilege escalation if an attacker gains access to the device. Connected sources corroborate...

CVE-2022-36616

TOTOLINK A810R V4.1.2cu.5182B20201026 and V5.9c.4050B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36614

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36614

CVE-2022-36614 affects TOTOLINK A860R, specifically V4.1.2cu.5182_B20201027, which is disclosed to contain a hardcoded root password in /etc/shadow.sample. The available connected documents confirm the affected product and the root-cause (hardcoded credential) but do not provide a documented fix/...

CVE-2022-36613

Summary of CVE-2022-36613 : Affects TOTOLINK N600R with version 4.3.0cu.7647_B20210106. The issue is a hardcoded root password stored in /etc/shadow.sample, enabling potential local unauthorized access. The CWE/underlying root cause is the presence of a built-in credential rather than a runtime m...

CVE-2022-36612

TOTOLINK A950RG V4.1.2cu.5204B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36612

CVE-2022-36612 affects TOTOLINK A950RG with firmware 4.1.2cu.5204_B20210112. The issue is a hardcoded root password stored in /etc/shadow.sample, enabling local access with high impact (confidentiality, integrity, availability). Exploitation details are not provided in the documents; no official ...

CVE-2022-36613

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36611

TOTOLINK A800R V4.1.2cu.5137B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-36611

TOTOLINK A800R V4.1.2cu.5137_B20200730 is affected by a hardcoded root password in /etc/shadow.sample. CVE-2022-36611 has a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact) with local access required and simultaneous high confidentiality, integrity, and availability impacts. The issue is document...