5.7
CVE-2025-63361
- EPSS 0.26%
- Veröffentlicht 04.12.2025 00:00:00
- Zuletzt bearbeitet 15.12.2025 15:35:06
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginWaveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Waveshare ≫ Rs232/485 To Wifi Eth (b) Firmware Version3.1.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.26% | 0.169 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 5.7 | 2.1 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing
https://otsecverse.github.io/OTSecVerse/posts/Post-1/