A vulnerability classified as very critical has been found in Totolink CP300 2.0.4-B202. This affects an unknown part of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password.

This vulnerability is uniquely identified as CVE-2024-36782. The attack can only be done within the local network. There is no exploit available.