IoT CVE-2026-30704

While formal CVSS and EPSS scores are not available for this CVE, the real-world risk assessment must account for the attack vector being physical, which significantly reduces the threat surface compared to remote exploits. An attacker requires physical possession of the device and basic soldering or connector skills to exploit this vulnerability. However, the absence of a CVSS vector should not minimize concern: the technical impact is high (information disclosure of sensitive firmware, credentials, and configuration data), the attack complexity is low to moderate (commodity tools and published research exist), and privilege escalation is not required. The presence of published security research (referenced via mstreet97.github.io) with detailed vulnerability disclosure indicates proof-of-concept information is publicly available, which increases the practical risk for users with devices in less secure physical locations or for adversaries with supply chain access. This is a legitimate priority for affected device owners, particularly in enterprise deployments or environments where device theft or physical tampering is a realistic threat model, though it is not a critical remote vulnerability.

An attacker with physical access to a WiFi Extender WDR201A (for example, after purchasing a used or refurbished unit, or in a retail/warehouse environment) removes the device casing and uses basic soldering equipment or a UART connector to attach to the exposed PCB pads. Using a USB-to-UART adapter and terminal software, the attacker connects to the UART interface and immediately gains console access to the bootloader or running firmware without authentication, allowing them to dump the entire firmware image, extract embedded credentials or keys, or access configuration data stored in memory. This scenario is practical because it requires only five to ten dollars of hardware tools and published instructions (available in the referenced security research), making it a credible threat for supply chain compromise or targeted attacks on specific high-value targets.