PT-2024-36415 · Comfast · Comfast Cf-Wr630Ax

Published 2024-12-10 · Updated 2024-12-11 · CVE-2024-54751

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions COMFAST CF-WR630AX version 2.7.0.2

Description The issue is related to a hardcoded password vulnerability in the /etc/shadow file, which allows attackers to log in as the root user. This vulnerability enables unauthorized access to the system, potentially leading to further malicious activities.

Recommendations For COMFAST CF-WR630AX version 2.7.0.2, consider changing the hardcoded password in the /etc/shadow file to a unique and secure password to prevent unauthorized root access. As a temporary workaround, restrict root login access until a patch is available.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-54751

Affected Products

Comfast Cf-Wr630Ax

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-54751 · Security Note
• https://t.me/cvedetector/12513 · Telegram Post
• https://twitter.com/CVEnew/status/1866492271010730156 · Twitter Post
• https://colorful-meadow-5b9.notion.site/CF-WR630AX_HardCode_vuln-14bc216a1c3080968161ce15e35fa652?pvs=4 · Note
• https://twitter.com/VulmonFeeds/status/1866556123773329497 · Twitter Post