CVE-2022-37841: High severity totolink a860r firmware vulnerability
Published Sep 6, 2022
·Updated
In TOTOLINK A860R V4.1.2cu.5182B20201027 there is a hard coded password for root in /etc/shadow.sample.
Affected Software
2 affected components
TOTOLINK A860r Firmware=4.1.2cu.5182_b20201027
TOTOLINK A860R
Event History
Sep 6, 2022
CVE Published
via MITRE·04:39 PM
Data Sourced
via MITRE·04:39 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-37841?
CVE-2022-37841 is considered a critical vulnerability due to the presence of a hard-coded root password.
2
How do I fix CVE-2022-37841?
To fix CVE-2022-37841, update the TOTOLINK A860R firmware to the latest version that removes the hard-coded password.
3
What are the potential risks of CVE-2022-37841?
The risks of CVE-2022-37841 include unauthorized access to the device and potential compromise of the network.
4
Which versions are affected by CVE-2022-37841?
CVE-2022-37841 specifically affects TOTOLINK A860R firmware version 4.1.2cu.5182_B20201027.
5
Is CVE-2022-37841 being actively exploited?
While there is no public report of active exploitation for CVE-2022-37841, the vulnerability's nature makes it a serious concern.