PT-2023-14973 · Prolink · Prolink Router Prs1841

Zux0X3A · Publicado 2023-02-21 · Atualizado 2023-03-02 · CVE-2022-46637

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Prolink router PRS1841

Description The Prolink router PRS1841 contains hardcoded credentials for its Telnet and FTP services. This issue allows unauthorized access to the device.

Recommendations For Prolink router PRS1841, consider changing the default credentials for Telnet and FTP services as a temporary workaround, and apply a patch or update when available to fully resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2022-46637

Produtos afetados

Prolink Router Prs1841

Referências · 6

• 🔥 https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers · Exploit
• https://osv.dev/vulnerability/CVE-2022-46637 · Aviso do Fabricante
• https://packetstormsecurity.com/files/170342/ProLink-PRS1841-Backdoor-Account.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-46637 · Nota de Segurança
• https://prolink2u.com/product/prs1841 · Aviso do Fabricante
• https://t.me/cibsecurity/58643 · Publicação no Telegram