Description
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
Published: 2024-05-13
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 13 Jul 2025 15:45:00 +0200

Type Values Removed Values Added
Metrics epss

{'score': 0.00331}

 epss

{'score': 0.00433}

Wed, 09 Apr 2025 16:45:00 +0200

Type Values Removed Values Added
First Time appeared Totolink ex200 Firmware
Weaknesses CWE-798
CPEs cpe:2.3:o:totolink:ex200_firmware:4.0.3c.7646_b20201211:*:*:*:*:*:*:*
Vendors & Products Totolink ex200 Firmware

Sat, 29 Mar 2025 01:15:00 +0100

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Thu, 13 Feb 2025 17:15:00 +0100

Type Values Removed Values Added
First Time appeared Totolink
Totolink ex200
CPEs cpe:2.3:h:totolink:ex200:-:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink ex200
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Totolink Ex200 Ex200 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-03-28T23:28:19.996Z

Reserved: 2024-04-05T00:00:00.000Z

Link: CVE-2024-31810

cve-icon Vulnrichment

Updated: 2024-08-02T01:59:50.095Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-14T15:25:45.230

Modified: 2026-06-17T07:28:45.743

Link: CVE-2024-31810

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-259

    Use of Hard-coded Password

  • CWE-798

    Use of Hard-coded Credentials