Hardcoded Password Vulnerability in COMFAST CF-WR630AX Router
CVE-2024-54751

9.8CRITICAL

Key Information:

Vendor

COMFAST

Status
CF-WR630AX
Vendor
CVE Published:
10 December 2024

What is CVE-2024-54751?

The COMFAST CF-WR630AX router version 2.7.0.2 has been identified as having a hardcoded password vulnerability found in the /etc/shadow file. This flaw allows attackers to bypass authentication mechanisms and gain root access to the device, thereby compromising its security and potentially enabling further exploits within the network. Users are strongly encouraged to review their security configurations and look for available patches or workarounds to mitigate this risk.

References

https://colorful-meadow-5b9.notion.site/CF-WR630AX_HardCo...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.