Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f35f-wmvq-g2gh

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this vulnerability.

A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this vulnerability.

EPSS

Процентиль: 59%
0.00377
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-259
CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this vulnerability.

EPSS

Процентиль: 59%
0.00377
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-259
CWE-798