Количество 4
Количество 4
CVE-2025-12386
Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
GHSA-4hm5-jmp9-7g72
Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
BDU:2026-02479
Уязвимость файла /goform/getHomePageInfo микропрограммного обеспечения маршрутизаторов Pix-Link LV-WR21Q, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2026-09000
Уязвимость конечной точки /goform/getHomePageInfo микропрограммного обеспечения маршрутизатора Pix-Link LV-WR21Q, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-12386 Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. | 1% Низкий | 7 месяцев назад | |
| GHSA-4hm5-jmp9-7g72 Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. | 1% Низкий | 7 месяцев назад | |
 | BDU:2026-02479 Уязвимость файла /goform/getHomePageInfo микропрограммного обеспечения маршрутизаторов Pix-Link LV-WR21Q, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.3 | 1% Низкий | 7 месяцев назад |
| BDU:2026-09000 Уязвимость конечной точки /goform/getHomePageInfo микропрограммного обеспечения маршрутизатора Pix-Link LV-WR21Q, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 1% Низкий | 7 месяцев назад |
Уязвимостей на страницу