Hardcoded Password Vulnerability in TOTOLINK A8000RU Wireless Router

CVE-2024-24324

Summary

The TOTOLINK A8000RU wireless router has been found to contain a serious security flaw involving a hardcoded password for the root user. This password is stored in the /etc/shadow file, which can lead to unauthorized access to the device. Such vulnerabilities expose the router to potential exploitation, allowing attackers to gain control over the network, manipulate settings, and pose significant risks to connected devices. Users are encouraged to review their devices and implement appropriate security measures to mitigate this vulnerability.

References