Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
| Vendors | Products |
|---|
References
History
Wed, 27 May 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Root Credential Hard-Coded in Netis AC1200 Router | |
| Weaknesses | CWE-287 CWE-522 CWE-798 |
Wed, 27 May 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-27T13:16:19.179Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-36538
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-05-27T14:16:45.403
Modified: 2026-05-27T20:04:31.980
Link: CVE-2026-36538
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-05-27T16:00:08Z