The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw...
Original description The description as published by the source.
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web cve@mitre.org
- web cve@mitre.org
- web nvd.nist.gov
- web github.com