Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing | Exploit Third Party Advisory |
| https://otsecverse.github.io/OTSecVerse/posts/Post-1/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Dec 2025, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing - Exploit, Third Party Advisory | |
| References | () https://otsecverse.github.io/OTSecVerse/posts/Post-1/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:o:waveshare:rs232\/485_to_wifi_eth_\(b\)_firmware:3.1.1.0:*:*:*:*:*:*:* cpe:2.3:h:waveshare:rs232\/485_to_wifi_eth_\(b\):4.3.2.1:*:*:*:*:*:*:* |
|
| First Time |
Waveshare rs232\/485 To Wifi Eth \(b\) Firmware
Waveshare rs232\/485 To Wifi Eth \(b\) Waveshare |
05 Dec 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.7 |
| CWE | CWE-522 |
04 Dec 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-04 19:16
Updated : 2025-12-15 15:35
NVD link : CVE-2025-63361
Mitre link : CVE-2025-63361
CVE.ORG link : CVE-2025-63361
JSON object : View
Products Affected
waveshare
- rs232\/485_to_wifi_eth_\(b\)
- rs232\/485_to_wifi_eth_\(b\)_firmware
CWE
CWE-522
Insufficiently Protected Credentials