CVE-2024-7159

Summary

CVE-2024-7159 is a critical vulnerability affecting the Telnet Service component of TOTOLINK A3600R 4.1.2cu.5182_B20201102. The issue involves unidentified processing of the file /web_cste/cgi-bin/product.ini, which results in the usage of a hard-coded password. This vulnerability has been publicly disclosed, posing a significant risk to affected systems. The identifier VDB-272573 has been assigned to this issue. Notably, the vendor was contacted regarding this disclosure but failed to provide a response.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.