← All advisories

Critical severity9.8NVD Advisory· Published Aug 10, 2022· Updated Jun 17, 2026

CVE-2022-35491

CVE-2022-35491

Description

TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.

Affected products

3

Totolink/A3002ru Firmware
cpe:2.3:o:totolink:a3002ru_firmware:3.0.0-b20220304.1804:*:*:*:*:*:*:*
Totolink/A3002RUcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = V3.0.0-B20220304.1804

Patches

Vulnerability mechanics

References

1

github.com/1337536723/iot/blob/main/totolink/A3002RU.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.