Description (CNA)
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Four-Faith / F3x36 | affected 2.0.0 |
CWE
CWE-489, CWE-798
References
- https://vulncheck.com/advisories/four-faith-hard-coded-creds
- https://talosintelligence.com/vulnerability_reports/TALOS-2023-1752
ADP enrichment
No English description supplied.