PT-2024-3807 · Totolink · Totolink Cp900L

Published 2024-05-24 · Updated 2024-07-03 · CVE-2024-35396

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOTOLINK CP900L version 4.1.5cu.798 B20221228

Description The issue is related to a hardcoded password for telnet in the /web cste/cgi-bin/product.ini file, allowing attackers to log in as root. This is due to the use of predefined credentials in the product.ini component of the telnet service in the TOTOLINK CP900L wireless access point firmware. Exploitation of this issue can enable a remote attacker to enter the system with root privileges.

Recommendations For TOTOLINK CP900L version 4.1.5cu.798 B20221228, consider disabling telnet access until a patch is available to remove the hardcoded password. Restrict access to the /web cste/cgi-bin/product.ini file to minimize the risk of exploitation. Avoid using the predefined credentials in the product.ini file for telnet service until the issue is resolved.

Fix

Improper Access Control

Using Hardcoded Credentials

Weakness Enumeration

CWE-284

CWE-259

CWE-798

Related Identifiers

BDU:2024-04182

CVE-2024-35396

Affected Products

Totolink Cp900L

References · 5

• https://osv.dev/vulnerability/CVE-2024-35396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35396 · Security Note
• https://bdu.fstec.ru/vul/2024-04182 · Security Note
• https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/README.md · Note
• http://totolink.com · Note