LB-LINK BL-AC3600 Hard-Coded Credentials Vulnerability

A critical vulnerability exists in the LB-LINK BL-AC3600 router model, specifically in version 1.0.22. This vulnerability involves hard-coded credentials stored in the /etc/shadow file. The credentials can be accessed locally by manipulating the input to 'root:blinkadmin'. The issue has been publicly disclosed, and an exploit is available.

Impact

Exploitation of this vulnerability leads to the introduction of hard-coded credentials, which can be used for unauthorized access or actions on the device.

Reproduction

To reproduce this vulnerability, local access to the LB-LINK BL-AC3600 router running firmware version 1.0.22 is required. Once access is obtained, the /etc/shadow file can be manipulated with the input 'root:blinkadmin' to retrieve the hard-coded credentials.