CVE-2022-29645

Name of the Vulnerable Software and Affected Versions TOTOLINK A3100R version V4.1.2cu.5050 B20200504 TOTOLINK A3100R version V4.1.2cu.5247 B20211129

Description A hard-coded password for the root user is stored in the /etc/shadow.sample component. This issue affects TOTOLINK A3100R devices.

Recommendations For TOTOLINK A3100R version V4.1.2cu.5050 B20200504, consider changing the root password to a unique and secure value. For TOTOLINK A3100R version V4.1.2cu.5247 B20211129, consider changing the root password to a unique and secure value. As a temporary workaround, restrict access to the /etc/shadow.sample component to minimize the risk of exploitation.