critical9.8
CVE-2019-7564
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices.
Impact
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coship | Rt3052 Firmware | Version 4.0.0.48 |
| Coship | Rt3050 Firmware | Version 4.0.0.40 |
| Coship | Wm3300 Firmware | Versions 5.0.0.54, 5.0.0.55 |
| Coship | Rt7620 Firmware | Version 10.0.0.49 |