Waveshare vulnerabilities
Published CVEs affecting Waveshare products: 4 record(s), with severity, exploitation and fixes.
CVE-2025-63362
Critical · 9.8
CWE-620 Dec 4, 2025
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0…
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.
CVE-2025-63361
Medium · 5.7
CWE-522 Dec 4, 2025
Insufficiently Protected Credentials in Waveshare Rs232/485 To Wifi Eth (b) Firmware
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext.
CVE-2025-63363
High · 7.5
CWE-284 Dec 4, 2025
Improper Access Control in Waveshare Rs232/485 To Wifi Eth (b) Firmware
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadcast without authentication or encryption.
CVE-2025-63364
High · 7.5
CWE-319 Dec 4, 2025
Cleartext Transmission of Sensitive Information in Waveshare Rs232/485 To Wifi Eth (b) Firmware
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext.