Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing | Exploit Third Party Advisory |
| https://otsecverse.github.io/OTSecVerse/posts/Post-4/ | Third Party Advisory Mitigation |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Dec 2025, 20:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Waveshare rs232\/485 To Wifi Eth \(b\) Firmware
Waveshare rs232\/485 To Wifi Eth \(b\) Waveshare |
|
| CPE | cpe:2.3:o:waveshare:rs232\/485_to_wifi_eth_\(b\)_firmware:3.1.1.0:*:*:*:*:*:*:* cpe:2.3:h:waveshare:rs232\/485_to_wifi_eth_\(b\):4.3.2.1:*:*:*:*:*:*:* |
|
| References | () https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing - Exploit, Third Party Advisory | |
| References | () https://otsecverse.github.io/OTSecVerse/posts/Post-4/ - Third Party Advisory, Mitigation |
08 Dec 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-319 |
04 Dec 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-04 17:15
Updated : 2025-12-16 20:59
NVD link : CVE-2025-63364
Mitre link : CVE-2025-63364
CVE.ORG link : CVE-2025-63364
JSON object : View
Products Affected
waveshare
- rs232\/485_to_wifi_eth_\(b\)
- rs232\/485_to_wifi_eth_\(b\)_firmware
CWE
CWE-319
Cleartext Transmission of Sensitive Information