CVE-2025-63364

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit…

High · published December 4, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

🚨 Your administrator credentials are being sent out like postcards — in plaintext! 🔥 If you're using the Waveshare RS232/485 TO WIFI ETH gateway, it’s time to pay attention. Think of this vulnerability like sending sensitive information via a postcard instead of a sealed envelope. Anyone who intercepts that postcard can read your admin credentials without breaking a sweat, putting your entire system at risk. An attacker could easily eavesdrop on your network traffic and grab those plaintext admin credentials, allowing them unauthorized access to your system. This could lead to full control over your devices, potentially resulting in data breaches or system manipulation. The consequences could be absolutely devastating!

Put simply

Think of this vulnerability like sending sensitive information via a postcard instead of a sealed envelope. Anyone who intercepts that postcard can read your admin credentials without breaking a sweat, putting your entire system at risk. This vulnerability in the Waveshare RS232/485 TO WIFI ETH gateway allows the transmission of administrator credentials in plaintext, making them vulnerable to interception during transmission.

What to do

An attacker could easily eavesdrop on your network traffic and grab those plaintext admin credentials, allowing them unauthorized access to your system. This could lead to full control over your devices, potentially resulting in data breaches or system manipulation. The consequences could be absolutely devastating! To mitigate this risk, upgrade your firmware to the latest version, which addresses this security flaw. Additionally, consider implementing encrypted communication protocols like HTTPS or VPN to secure data transmission moving forward. You've got this! Follow these steps, and you'll enhance your security in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Published
2025-12-04T00:00Z
EPSS history
Timeline
  • 04 DEC 00:00Z
    Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit…
    cvelistv5