A hardcoded password, such as this one, is a very bad sign. It means that the device was probably developed by a third party. The device might have been reviewed and deemed okay, but it is very likely that the code does not work as it should. Due to the fact that the source code for the Totolink A860R V4.1.2cu.5182_B20201027 was not published, it is very hard to uncover any deeper issues. However, flashing a new firmware on the device might help to discover any problems with the software itself.

The ADB port can be found in the back panel of the device. In order to check if the device has an ADB port, you can connect a computer via USB port and look for the serial port. A USB serial adapter will also work for this purpose. If you find an open serial port, then that means that the device does have an ADB port.

If your Totolink A860R V4.1.2cu.5182_B20201027 does not have a serial port, then it most likely does not have an ADB port either. In this case, you will need to install a third-party app on your device before you can use ADB or fastboot commands to unlock your bootloader and flash custom ROMs onto your device.

Totolink A860R V4.1.2cu.5182_B20201027 features: 4G LTE WCDMA/HSPA+/LTE Cat 4, Wi-Fi 802.11 b/g/n 2x2 MIMO, Bluetooth v4 LE

S/N: DD3IGN7
The best way to install a firmware on the Totolink A860R V4.1.2cu.5182_B20201027 is by using the Internet Explorer browser. This can be done through the official website or you can go to Google and enter "Totolink A860R V4.1.2cu.5182" into the search bar to find instructions that are updated regularly for this device model. To use these instructions, you will need to download the toolbox called flashtool for Mac or for Windows, and a compatible USB cable (which usually comes with your device). For this tutorial, an external HDD was used as a flash drive, although most devices come with one already included in their packaging or bundle.

To install new firmware on the device, it is necessary to first obtain a USB drive that has the required firmware for your device. Once you find the firmware you want for your device, use a computer to extract that firmware onto a USB drive. Once you have the USB drive with the correct firmware, follow these steps:

1) Download and install a suitable adb driver onto your computer. If you are running Windows, download and run "adb.exe" from C:\Windows\System32\drivers . If you are running Linux or Mac OS X, download and extract "Fastboot-v2-0-setup" from https://sourceforge.net/projects/fastboot/files/Fastboot%202.0/setup and double click on the extracted folder to launch the setup. This will install all of the necessary Fastboot files into your system directory:
2) Launch one of these following commands depending on what operating system you have:
Windows : adb devices  | command window -e "adb reboot bootloader"  | adb push efuse.* /data/local
Linux or Mac OS X: ./fastboot devices   | ./fastboot reboot bootloader   | ./fastboot flash efuse /data/local

The A860R is a wireless router from Totolink, which is an OEM of MikroTik networking devices. The device was recently discovered to have a hardcoded password. This makes it very easy for anyone with physical access to the device to gain access to the network.

This particular CVE-2022-36614 hardcoded password went unnoticed since it was not published by the company in the first place. This means that any malicious attackers could easily gain access to your wireless network and often steal your passwords or private information.

Timeline

Published on: 08/29/2022 00:15:00 UTC
Last modified on: 09/01/2022 18:52:00 UTC

References