CVE-2024-35395

8.8HIGH

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

Published: 5/24/2024Updated: 4/3/2025
View on NVDView on MITRE

Description

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

AI AnalysisPowered by AI

Affected Products

totolinkcp900l_firmware
4.1.5cu.798_b20221228
totolinkcp900l
-

References