CVE-2025-22936
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Smartcom Ralink CPE/WiFi routers SAM-4G1G-TT-W-VC and SAM-4F1F-TT-W-A1 have a weak default WiFi password generation algorithm. This allows a remote attacker to recover the password and gain network access.
Risk Assessment
The organization is at risk of unauthorized WiFi access, potentially leading to data interception, man-in-the-middle attacks, or misuse of network resources by unauthorized parties.
Recommendation
Immediately change the default WiFi password to a strong, unique password and update the router firmware if a patch is available from the vendor.
Original NVD description (English source)
An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote attacker to obtain sensitive information via the Weak default WiFi password generation algorithm in WiFi routers.