CVE-2022-22144

Name of the Vulnerable Software and Affected Versions TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14

Description A hard-coded password vulnerability exists in the libcommonprod.so prod change root passwd functionality. This functionality is called during system startup, resulting in a known root password. An attacker does not need to take any action to trigger this issue.

Recommendations For TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14, consider disabling the prod change root passwd functionality in the libcommonprod.so library until a patch is available. Restrict access to the root account to minimize the risk of exploitation.