Web Interface Authentication Bypass in Affected Devices by Vendor

CVE-2025-36754

What is CVE-2025-36754?

The security flaw in the web interface allows for improper implementation of the authentication mechanism. Attackers can exploit this vulnerability by crafting a post request with altered settings, facilitating unauthorized access. Without session tokens or adequate authentication in place, malicious actors could redirect the device to arbitrary addresses, potentially enabling man-in-the-middle (MitM) attacks that compromise data integrity and privacy.

References