high7.5
CVE-2021-28936
The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request.
Impact
The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known (default:admin) whereas no previous authentication is required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acexy | Wireless-N Wifi Repeater Firmware | Version 28.08.06.1 |