← back
CVE-2024-8162

TOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials

CVSS 9.3 CRITICALEPSS 1.7%CWE-798
A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
TOTOLINK · T10 AC1200
public PoCs found — 1
cve_referencegithub.com/rohitburke/TOTOLINKunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/rohitburke/TOTOLINKhttps://vuldb.com/?ctiid.275760https://vuldb.com/?id.275760https://vuldb.com/?submit.392015https://www.totolink.net/