Vulnerabilidades de Waveshare
CVEs publicadas que afetam produtos de Waveshare: 4 registro(s), com severidade, exploração e correções.
CVE-2025-63362
Crítica · 9.8
CWE-620 04/12/2025
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0…
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.
CVE-2025-63361
Média · 5.7
CWE-522 04/12/2025
Insufficiently Protected Credentials em Waveshare Rs232/485 To Wifi Eth (b) Firmware
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext.
CVE-2025-63363
Alta · 7.5
CWE-284 04/12/2025
Improper Access Control em Waveshare Rs232/485 To Wifi Eth (b) Firmware
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadcast without authentication or encryption.
CVE-2025-63364
Alta · 7.5
CWE-319 04/12/2025
Cleartext Transmission of Sensitive Information em Waveshare Rs232/485 To Wifi Eth (b) Firmware
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext.