CoreCVE
Back

CRITICAL

A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request

Published Feb 2, 2023

Description

A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 2, 2023
Updated Mar 26, 2025
Reserved Dec 29, 2022
Link CVE-2022-48113
CISA Vulnrichment
Updated Mar 26, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-48113
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-48113