PT-2022-24583
CVE-2022-38823
·
تاريخ النشر
2022-09-16
·
تاريخ التحديث
2022-09-17
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TOTOLINK T6 version 4.1.5cu.709 B20210518
Description
The issue concerns a hard-coded password for the root user located in the /etc/shadow.sample file. This presents a significant security risk as it could allow unauthorized access to the system.
Recommendations
For TOTOLINK T6 version 4.1.5cu.709 B20210518, consider changing the root password to a unique and secure value to mitigate the risk of exploitation. As a temporary workaround, restrict access to the root account until a patch or update is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾