Back to Database
Status published
High
CVE-2022-22144
A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality...
Vulnerability Description
A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-22144
Credits & Attribution
No credits recorded in the NVD database.
More from TCL
View All →CVE-2024-11136
Arbitrary file removal via path traversal in TCL Camera
High
8.2
CVE-2022-27660
A denial of service vulnerability exists in the confctl_set_guest_wlan functionality...
Critical
9.3
CVE-2022-27633
An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of...
Medium
6.5
CVE-2022-27630
An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of...
Medium
6.5
CVE-2022-27185
A denial of service vulnerability exists in the confctl_set_master_wlan functionality...
Critical
9.3
Affected Vendor
Affected Software
LinkHub Mesh Wifi
Vulnerable Versions:
MS1G_00_01.00_14
Timeline
Official Publish:
August 5th, 2022
Last Modified:
April 15th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H