exploitDog

GHSA-8j63-78xq-x2q3

Опубликовано: 04 дек. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.

Ссылки

EPSS

Процентиль: 38%

0.00169

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-620

Связанные уязвимости

CVE-2025-63362

CVSS3: 9.8

nvd

2 месяца назад

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.

EPSS

Процентиль: 38%

0.00169

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-620