CVE-2024-35396 | Totolink CP900L 4.1.5cu.798_B20221228 Telnet product.ini hard-coded password

A vulnerability classified as very critical was found in Totolink CP900L 4.1.5cu.798_B20221228. This vulnerability affects unknown code of the file /web_cste/cgi-bin/product.ini of the component Telnet. The manipulation leads to use of hard-coded password.

This vulnerability was named CVE-2024-35396. The attack can be initiated remotely. There is no exploit available.

It is recommended to apply restrictive firewalling.