critical9.8
CVE-2024-35396
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to lo…
Impact
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Cp900l Firmware | Version 4.1.5cu.798_b20221228 |