| शीर्षक | TOTOLINK Wi-Fi 6 Router X2000R-Gh-V2.0.0 Insecure Storage of Sensitive Information |
|---|
| विवरण | An insecure password vulnerability was identified in TOTOLINK Wi-Fi 6 Router series devices running firmware version X2000R-Gh-V2.0.0. The root user account uses a weak password (cracked as "123456" using the John tool). This password is stored in the world-readable file /etc/shadow.sample using MD5-crypt hashing, which can be easily decrypted by tools like John and exploited. For example, it allows unauthorized root access to the device through network-accessible services or the administrative interface. |
|---|
| उपयोगकर्ता | lxyilu (UID 88936) |
|---|
| सबमिशन | 16/08/2025 12:31 PM (1 वर्ष पहले) |
|---|
| संयम | 28/08/2025 01:12 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 321691 [TOTOLINK X2000R तक 2.0.0 Administrative Interface /etc/shadow.sample सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|