critical9.8
CVE-2024-36782
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
Impact
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Cp300 Firmware | Version 2.0.4-b20201102 |