{"id":"CVE-2022-46637","aliases":["EUVD-2022-49441","GHSA-p25x-ww85-g4gw"],"status":"published","title":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP...","description":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01525,"percentile":0.74848,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2023-02-21T00:00:00Z","modified":"2026-06-17T05:12:05Z","products":[{"vendor":"prolink2u","product":"prs1841_firmware"}],"references":[{"url":"https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://prolink2u.com/product/prs1841/","tags":["x_transferred","Product","Vendor Advisory"]},{"url":"https://packetstormsecurity.com/files/170342/ProLink-PRS1841-Backdoor-Account.html","tags":["x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46637"},{"url":"https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers"},{"url":"https://prolink2u.com/product/prs1841"},{"url":"https://github.com/advisories/GHSA-p25x-ww85-g4gw"}],"sources":{"cve":[{"id":"CVE-2022-46637","description":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2025-03-14T18:26:05.904Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:34:32.156873Z"}],"euvd":[{"id":"EUVD-2022-49441","description":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2025-03-14T18:26:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:02.719002Z"}],"ghsa":[{"id":"GHSA-p25x-ww85-g4gw","title":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP...","description":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.","status":"published","published":"2023-02-21T21:30:16Z","modified":"2025-03-14T21:32:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T15:00:17.776608Z"}],"nvd":[{"id":"CVE-2022-46637","description":"Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.","status":"published","published":"2023-02-21T21:15:10.89Z","modified":"2026-06-17T05:12:05.847Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:07:36.601381Z"}]}}