CVE-2025-63362

Critical

Published: 04/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.

Risk Assessment

An attacker can gain access to the device without authentication, potentially leading to unauthorized configuration and network security compromise.

Recommendation

Update the device firmware to the latest version if a patch is available. Additionally, set strong passwords and disable remote access if not required.

Original NVD description (English source)

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.