What’s Vulnerable › Vulnerabilities

CVE-2022-34993

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-04 · updated 2026-06-17
• Weakness: CWE-798

Description

Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.

Affected products

• TOTOLINK A3600R: 4.1.2cu.5182_b20201102

References

• http://www.totolink.cn/home/menu/detail.html?menu_listtpl=download&id=63&ids=36image-20220606105532193
• https://github.com/cilan2/iot/blob/main/1.md
• http://www.totolink.cn/home/menu/detail.html?menu_listtpl=download&id=63&ids=36image-20220606105532193
• https://github.com/cilan2/iot/blob/main/1.md

Get alerted when CVE-2022-34993 or the next vulnerability affects your stack