N0Hat

**Name of the Vulnerable Software and Affected Versions** PIX-Link Repeater/Router LV-WR07 version v28K.Router.20170904 **Description** The issue allows attackers to steal credentials without being connected to the network, using a crafted ESSID as the attack vector, specifically targeting the `SET2` parameter in the `wireless.htm` page. **Recommendations** For PIX-Link Repeater/Router LV-WR07 version v28K.Router.20170904, avoid using the `SET2` parameter in the `wireless.htm` page until the issue is resolved. Consider changing the ESSID to a random value and restricting access to the wireless network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.