Kritik CVSS 9.8
CVE-2026-79589: CVE-2026-79589: kritik işlevde kimlik doğrulaması eksik
Açıklama (NVD)
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
Özet bilgiler
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,35 (yüzdelik 28)
- CWE
- CWE-306
- Yama
- Yok / bilinmiyor