CVE-2022-37841

HIGH

TOTOLINK A860R V4.1.2cu.5182_B20201027 - Use of Hard-coded Credentials

Title source: llm

In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.

Core 1

Core References

Broken Link, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0033

EPSS Percentile 55.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-798

Status published

Products (1)

totolink/a860r_firmware 4.1.2cu.5182_b20201027

Published Sep 06, 2022

Tracked Since Feb 18, 2026