CVE-2025-63363
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadcast without authentication or encryption.
Affected (1)
Products: Waveshare: Rs232/485 To Wifi Eth (b) Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.1.0 |
| Running on/with | Platform Versions |
|---|---|
Waveshare Rs232/485 To Wifi Eth (b) | Version 4.3.2.1 |
Related CWEs
CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-300
Channel Accessible by Non-Endpoint
The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.
References (2)
Source: cve@mitre.org
ExploitThird Party Advisory
Timeline
No history available yet.