Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 27 May 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Root Credential Hard-Coded in Netis AC1200 Router | |
| Weaknesses | CWE-287 CWE-522 CWE-798 |
Wed, 27 May 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-27T13:16:19.179Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-36538
No data.
Status : Received
Published: 2026-05-27T14:16:45.403
Modified: 2026-05-27T14:16:45.403
Link: CVE-2026-36538
No data.
OpenCVE Enrichment
Updated: 2026-05-27T16:00:08Z