PT-2022-11273 · Edimax · Edimax Ic-3140W

Published 2022-06-29 · Updated 2022-07-11 · CVE-2021-40597

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EDIMAX IC-3140W version 3.11

Description The issue concerns the firmware of the EDIMAX IC-3140W, where the Administrator username and password are hardcoded. This means that the credentials for administrative access are embedded directly into the firmware, potentially allowing unauthorized access.

Recommendations For EDIMAX IC-3140W version 3.11, consider changing the hardcoded Administrator username and password to custom credentials as soon as possible to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2021-40597

Affected Products

Edimax Ic-3140W

References · 6

• 🔥 https://drive.google.com/file/d/1ZPFwAoO8tAD0zrWwVZ9W6-CUCrcM0Exm/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-40597 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40597 · Vendor Advisory
• https://edimax.com/edimax/download/download/data/edimax/global/download · Vendor Advisory
• https://drive.google.com/file/d/1DZCzVULjchY0rSJBXIPr0gJM1qWCcAZ5/view?usp=sharing · Note
• https://t.me/cibsecurity/45385 · Telegram Post