PT-2022-19749
CVE-2022-29645
·
تاريخ النشر
2022-05-18
·
تاريخ التحديث
2022-05-26
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TOTOLINK A3100R version V4.1.2cu.5050 B20200504
TOTOLINK A3100R version V4.1.2cu.5247 B20211129
Description
A hard-coded password for the root user is stored in the
/etc/shadow.sample component. This issue affects TOTOLINK A3100R devices.Recommendations
For TOTOLINK A3100R version V4.1.2cu.5050 B20200504, consider changing the root password to a unique and secure value.
For TOTOLINK A3100R version V4.1.2cu.5247 B20211129, consider changing the root password to a unique and secure value.
As a temporary workaround, restrict access to the
/etc/shadow.sample component to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾