Lxyilu

**Name of the Vulnerable Software and Affected Versions** Cudy LT500E versions prior to 2.3.13 **Description** A vulnerability exists in Cudy LT500E up to version 2.3.12. The issue resides in an unknown function within the `/squashfs-root/etc/shadow` file of the Web Interface component, leading to the use of a hard-coded password. The attack requires local access and is considered difficult to exploit. The default password stored in the firmware is 'admin'. **Recommendations** Upgrade to version 2.3.13 or later to address this issue.

**Name of the Vulnerable Software and Affected Versions** seeedstudio ReSpeaker LinkIt7688 (affected versions not specified) **Description** A vulnerability exists in seeedstudio ReSpeaker LinkIt7688, impacting an unknown function within the Administrative Interface component’s `/etc/shadow` file. This manipulation allows for the use of default credentials. Local access is required for exploitation, which is considered difficult due to its complexity. The exploit is publicly available. The vendor was contacted regarding this issue but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK X2000R versions through 2.0.0 **Description** A security flaw has been discovered that allows for the use of default credentials. The affected element is an unknown function within the `/etc/shadow.sample` file of the Administrative Interface component. Local access is required for exploitation, which is described as difficult. The exploit has been released publicly and may be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions:** Tenda AC1206 version 15.03.06.23 **Description:** A stack-based buffer overflow vulnerability exists in the `GetParentControlInfo` function of the `/goform/GetParentControlInfo` file. Manipulation of the `mac` argument can trigger the vulnerability, allowing for remote code execution. The exploit for this issue is publicly available. **Recommendations:** Tenda AC1206 version 15.03.06.23: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A vulnerability exists in the MD5 Hash Handler component of Tenda AC10. The issue affects an unknown function within the `/etc ro/shadow` file. Manipulation of this function results in the exposure of hard-coded credentials. The attack requires local access and is considered to have a high degree of complexity, with difficult exploitability. The exploit has been made public and may be used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC21 version 16.03.08.16 Tenda AC23 version 16.03.08.16 **Description** A stack-based buffer overflow vulnerability exists in the `GetParentControlInfo` function of the `/goform/GetParentControlInfo` file in Tenda AC21 and AC23 routers. Manipulation of the `mac` argument can trigger the overflow, allowing for remote exploitation. The exploit has been publicly disclosed. **Recommendations** For Tenda AC21 version 16.03.08.16, disable remote management and segment networks. For Tenda AC23 version 16.03.08.16, disable remote management and segment networks.