Netis AC1200 Router CVE-2026-36538
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Lifecycle Timeline
3DescriptionNVD
Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.
AnalysisAI
Hard-coded root credentials in Netis AC1200 Router NC21 firmware V4.0.1.4296 allow attackers who reach the device to log in as root using the trivially guessable password 'root' stored in /etc/shadow.sample. No public exploit identified at time of analysis and EPSS is very low (0.02%), but the credential is static across affected units, making any exposed management interface a one-step compromise. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all Netis AC1200 Router NC21 devices running firmware V4.0.1.4296; immediately restrict management interface access via firewall rules to known trusted internal IP ranges only; disable remote management features. Within 7 days: Implement network segmentation isolating management ports from general network traffic; enable authentication logging on management interfaces; document all access points and review logs for unauthorized access attempts. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today