VULNERABILITY INTELLIGENCE

CVE-2022-22144

CVSS score9.8 CRITICAL
EPSS probability1.02%
CISA KEVNot currently listed
Published2022-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this vulnerability.

Weakness classification

  • talos-cna@cisco.com: CWE-259
  • nvd@nist.gov: CWE-798

Primary references