CVE-2022-34993

Name of the Vulnerable Software and Affected Versions Totolink A3600R Firmware version V4.1.2cu.5182 B20201102

Description The issue concerns a hard-coded password for the root user in the /etc/shadow.sample file. This could potentially allow unauthorized access to the system.

Recommendations For Totolink A3600R Firmware version V4.1.2cu.5182 B20201102, consider changing the root password to a unique and secure value as soon as possible to mitigate the risk of exploitation. Additionally, restrict access to the /etc/shadow.sample file to minimize the risk of the hard-coded password being used. At the moment, there is no information about a newer version that contains a fix for this vulnerability.