Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-34993

Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.

Published

2022-08-04T19:15:09.887

Last Modified

2024-11-21T07:10:32.660

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Primary
CWE-798

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	totolink	a3600r_firmware	4.1.2cu.5182_b20201102	Yes
Hardware	totolink	a3600r	-	No

References

http://www.totolink.cn/home/menu/detail.html?menu_listtpl=download&id=63&ids=36image-20220606105532193 Product, Vendor Advisory ([email protected])
https://github.com/cilan2/iot/blob/main/1.md Exploit, Third Party Advisory ([email protected])
http://www.totolink.cn/home/menu/detail.html?menu_listtpl=download&id=63&ids=36image-20220606105532193 Product, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/cilan2/iot/blob/main/1.md Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)