CVE-2022-34993: Critical severity totolink a3600r firmware vulnerability
Published Aug 4, 2022
·Updated
Totolink A3600RFirmware V4.1.2cu.5182B20201102 contains a hard code password for root in /etc/shadow.sample.
Affected Software
2 affected components
TOTOLINK A3600r Firmware=4.1.2cu.5182_b20201102
TOTOLINK A3600R
Event History
Aug 4, 2022
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-34993?
CVE-2022-34993 has a high severity rating due to the hard-coded root password in the firmware.
2
How do I fix CVE-2022-34993?
To fix CVE-2022-34993, update the Totolink A3600R Firmware to a version that does not include the hard-coded password.
3
Which devices are affected by CVE-2022-34993?
CVE-2022-34993 affects the Totolink A3600R with firmware version 4.1.2cu.5182_B20201102.
4
What are the potential risks of CVE-2022-34993?
The risks include unauthorized access and control over the Totolink A3600R router due to the hard-coded password.
5
Is there a patch available for CVE-2022-34993?
Yes, a patch that removes the hard-coded password has been made available by the vendor for the affected firmware version.