CVE-2022-46637

Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services

Critical · published February 21, 2023

CVSS v3.1
9.8
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

🔥 A router with hardcoded credentials? That’s a security nightmare waiting to happen! Think of it like leaving your front door wide open with a note saying, 'Feel free to come in!' Hardcoded credentials are like a master key that anyone can use without needing an invitation. An attacker could waltz right into the network, gaining access to both Telnet and FTP services. This means they could potentially hijack devices, conduct data theft, or take complete control of the router, leading to absolutely devastating consequences.

Put simply

Think of it like leaving your front door wide open with a note saying, 'Feel free to come in!' Hardcoded credentials are like a master key that anyone can use without needing an invitation. The Prolink router PRS1841 has hardcoded credentials that allow unauthorized users to access its Telnet and FTP services, bypassing any form of authentication and security altogether.

What to do

An attacker could waltz right into the network, gaining access to both Telnet and FTP services. This means they could potentially hijack devices, conduct data theft, or take complete control of the router, leading to absolutely devastating consequences. Update the router firmware immediately to the latest version that removes these hardcoded credentials. Additionally, change any default passwords, and consider enhancing your network security with firewalls or VPNs. You've got this! By taking these steps, you’ll not only protect your network but elevate your security hero status! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01525 · 74.5th percentile
Published
2023-02-21T00:00Z
EPSS history
Timeline
  • 21 FEB 00:00Z
    Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services
    cvelistv5