CVE-2025-63422

Summary

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://imgur.com/a/X9DNOBj
• https://github.com/5ulfur/security-advisories/tree/main/CVE-2025-63422

• ←Previous
• Next→