CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware, which would typically be used with firmware 2.1.1 or later.

• CWE-284

• https://semaja2.net/2023/06/11/siklu-tg-auth-bypass.html
• https://semaja2.net/2023/06/11/siklu-tg-auth-bypass.html

Published

Mar 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47027Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauth…9.8
• CVE-2022-47028An issue discovered in Action Launcher for Android v50.5 all…5.5
• CVE-2022-47029An issue was found in Action Launcher v50.5 allows an attack…7.8
• CVE-2022-4703The Royal Elementor Addons plugin for WordPress is vulnerabl…8.1
• CVE-2022-47034A type juggling vulnerability in the component /auth/fn.php …9.8
• CVE-2022-47035Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44eb…9.8
• CVE-2022-47037Siklu TG Terragraph devices before 2.1.1 allow attackers to …7.5
• CVE-2022-4704The Royal Elementor Addons plugin for WordPress is vulnerabl…8.1
• CVE-2022-47040An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN100…7.8
• CVE-2022-47042MCMS v5.2.10 and below was discovered to contain an arbitrar…8.8
• CVE-2022-4705The Royal Elementor Addons plugin for WordPress is vulnerabl…4.3
• CVE-2022-47052The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi…6.1