Power13
Monthly
Unauthenticated remote attackers can invoke the routerd.passwd_set function exposed through the /ubus management interface on Netcore POWER13 (build 2.0.240730.162638) to reset or recover device credentials through a weak password-recovery mechanism (CWE-640). The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms the attack is remote, low complexity, and requires neither authentication nor user interaction, though practical exposure depends on whether /ubus is reachable from the LAN only or also from the WAN; impact is scored as limited across confidentiality, integrity, and availability. Publicly available exploit code exists - a detailed proof-of-concept write-up is published on GitHub - and the vendor was contacted but did not respond, so no vendor-released patch is identified at time of analysis. EPSS and KEV data were not provided; this is not confirmed as actively exploited.
Unauthenticated remote attackers can invoke the routerd.passwd_set function exposed through the /ubus management interface on Netcore POWER13 (build 2.0.240730.162638) to reset or recover device credentials through a weak password-recovery mechanism (CWE-640). The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms the attack is remote, low complexity, and requires neither authentication nor user interaction, though practical exposure depends on whether /ubus is reachable from the LAN only or also from the WAN; impact is scored as limited across confidentiality, integrity, and availability. Publicly available exploit code exists - a detailed proof-of-concept write-up is published on GitHub - and the vendor was contacted but did not respond, so no vendor-released patch is identified at time of analysis. EPSS and KEV data were not provided; this is not confirmed as actively exploited.