PT-2025-49109 · Waveshare+1 · Rs232/485 To Wifi Eth+1

Published 2025-12-04 · Updated 2025-12-04 · CVE-2025-63362

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware version 3.1.1.0

Description The webpage component, version V7.04T.07.002880.0301, allows attackers to set the Administrator username and password to blank values, bypassing authentication. The hardware version is 4.3.2.1.

Recommendations Apply a fix to prevent setting blank values for the Administrator username and password.

Exploit

Fix

Weakness Enumeration

CWE-620

Related Identifiers

CVE-2025-63362

Affected Products

Rs232/485 To Wifi Eth

V7.04T.07.002880.0301

References · 6

• 🔥 https://otsecverse.github.io/OTSecVerse/posts/Post-2 · Exploit
• 🔥 https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2025-63362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63362 · Security Note
• https://twitter.com/CVEnew/status/1996647156678049804 · Twitter Post
• https://t.me/CVEtracker/38857 · Telegram Post