CVEvulnerability

CVE-2026-36538

7.3 HIGH Published 2026-05-27 Modified 2026-10-19 Official page ↗
Status
Deferred
Published
2026-05-27
Last modified
2026-10-19
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-798

Description

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References