CVE-2022-38556

Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh

published August 28, 2022

CVSS
—
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

🚨 A static default credential in the Trendnet TEW733GR could let anyone waltz right in without a password! 🔥 This is like leaving your front door wide open with a big 'Welcome' mat—anyone can just stroll in and make themselves at home. It's crucial to secure your network against unauthorized guests! If attackers exploit this vulnerability, they could gain full access to your router, allowing them to change settings, intercept traffic, or even launch attacks on connected devices. The consequences could range from nuisance to serious data breaches!

Put simply

This is like leaving your front door wide open with a big 'Welcome' mat—anyone can just stroll in and make themselves at home. It's crucial to secure your network against unauthorized guests! This vulnerability exists because the Trendnet TEW733GR retains a static default credential in a startup script, making it vulnerable to unauthorized access if the default credentials aren’t changed by the user.

What to do

If attackers exploit this vulnerability, they could gain full access to your router, allowing them to change settings, intercept traffic, or even launch attacks on connected devices. The consequences could range from nuisance to serious data breaches! To mitigate this issue, change the default credentials immediately. Regularly update your router firmware and consider implementing additional security measures like strong passwords and network segmentation. You've got this! With these steps, you'll lock down your network in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01132 · 66.2th percentile
Published
2022-08-28T15:52Z
EPSS history
Timeline
  • 28 AUG 15:52Z
    Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh
    cvelistv5