CVE-2024-8580: TOTOLINK AC1200 T8 shadow.sample hard-coded password
A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861B20230220. This vulnerability affects unknown code of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8580?
CVE-2024-8580 is classified as a critical vulnerability due to its potential for remote exploitation and the use of hard-coded passwords.
How do I fix CVE-2024-8580?
To mitigate CVE-2024-8580, update the TOTOLINK AC1200 T8 firmware to a version that addresses this vulnerability.
What file is affected by CVE-2024-8580?
CVE-2024-8580 affects the /etc/shadow.sample file in the TOTOLINK AC1200 T8 firmware.
Can CVE-2024-8580 be exploited remotely?
Yes, CVE-2024-8580 can be exploited remotely, allowing attackers to manipulate the hard-coded password.
Which version of TOTOLINK AC1200 T8 is vulnerable to CVE-2024-8580?
The vulnerable version of TOTOLINK AC1200 T8 firmware is 4.1.5cu.861_B20230220.