Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing | Exploit Third Party Advisory |
| https://otsecverse.github.io/OTSecVerse/posts/Post-2/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Dec 2025, 15:37
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Waveshare rs232\/485 To Wifi Eth \(b\) Firmware
Waveshare rs232\/485 To Wifi Eth \(b\) Waveshare |
|
| CPE | cpe:2.3:o:waveshare:rs232\/485_to_wifi_eth_\(b\)_firmware:3.1.1.0:*:*:*:*:*:*:* cpe:2.3:h:waveshare:rs232\/485_to_wifi_eth_\(b\):4.3.2.1:*:*:*:*:*:*:* |
|
| References | () https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing - Exploit, Third Party Advisory | |
| References | () https://otsecverse.github.io/OTSecVerse/posts/Post-2/ - Exploit, Third Party Advisory |
08 Dec 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-620 |
04 Dec 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-04 19:16
Updated : 2025-12-15 15:37
NVD link : CVE-2025-63362
Mitre link : CVE-2025-63362
CVE.ORG link : CVE-2025-63362
JSON object : View
Products Affected
waveshare
- rs232\/485_to_wifi_eth_\(b\)
- rs232\/485_to_wifi_eth_\(b\)_firmware
CWE
CWE-620
Unverified Password Change