CVE-2026-36538
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
The Netis AC1200 Router NC21 firmware version V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The root account password is set to the trivially weak value 'root', allowing an attacker with device access to authenticate as root and gain full control of the underlying operating system.
Risk Assessment
The organization is at risk of complete compromise of the router by an attacker who gains physical or remote access to the device. This could lead to network traffic interception, configuration modification, and further attacks on the internal network.
Recommendation
Immediately update the router firmware to the latest version that fixes this vulnerability. If no update is available, change the default root password to a strong, unique password and restrict management interface access to trusted IP addresses only.
Original NVD description (English source)
Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.