CVE-2024-9643

Name of the Vulnerable Software and Affected Versions Four-Faith F3x36 router version 2.0.0

Description The issue is related to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests.

Recommendations For Four-Faith F3x36 router version 2.0.0, consider changing the hard-coded credentials in the administrative web server to prevent unauthorized access. As a temporary workaround, restrict access to the administrative web server until a patch is available.