CVE-2025-63362

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the…

Critical · published December 4, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

🚨 A blank password and username? That's all it takes to bypass authentication on the Waveshare RS232/485 to Wi-Fi Gateway! 🔥 Think of it like an unlocked front door with no doorbell — anyone can just walk in without even knocking. This security oversight allows attackers to waltz right into your system like they own the place! With this vulnerability, an attacker could completely take control of your device, changing settings and potentially accessing sensitive data. Imagine giving intruders the keys to your digital kingdom — they could wreak absolute havoc!

Put simply

Think of it like an unlocked front door with no doorbell — anyone can just walk in without even knocking. This security oversight allows attackers to waltz right into your system like they own the place! This critical vulnerability allows attackers to set both the Administrator username and password to blank values, effectively giving them unauthorized access to the device's management features without authentication checks.

What to do

With this vulnerability, an attacker could completely take control of your device, changing settings and potentially accessing sensitive data. Imagine giving intruders the keys to your digital kingdom — they could wreak absolute havoc! To secure your devices, update the firmware to the latest version immediately. Ensure that strong, unique passwords are set for all administrative accounts and consider implementing network segmentation to limit exposure. You've got this! Follow these steps to lock things down tight and keep those intruders out for good! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00573 · 46.6th percentile
Published
2025-12-04T00:00Z
EPSS history
Timeline
  • 04 DEC 00:00Z
    Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the…
    cvelistv5