CVE-2025-63422

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to…

High · published October 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

🚨 An improperly secured web management interface can be exploited with just one crafted GET request! This means attackers can change your admin username and password without breaking a sweat. ⚡ Think of it like a hotel where anyone can walk up to the front desk and change the name on the room key without verification—total chaos and unauthorized access! If an attacker gains control of the admin credentials, they would have unrestricted access to your router's settings. This could lead to unauthorized network changes, exposing your entire network to further attacks and misconfigurations. Absolutely devastating!

Put simply

Think of it like a hotel where anyone can walk up to the front desk and change the name on the room key without verification—total chaos and unauthorized access! The vulnerability in the Each Italy Wireless Mini Router allows attackers to bypass access controls, enabling them to modify important admin credentials through a specially crafted GET request. This oversight leaves the door wide open for unauthorized users.

What to do

If an attacker gains control of the admin credentials, they would have unrestricted access to your router's settings. This could lead to unauthorized network changes, exposing your entire network to further attacks and misconfigurations. Absolutely devastating! To fix this, update the firmware of your router to the latest version immediately. Ensure that default credentials are changed and consider disabling remote management if it's not necessary. Audit your network configuration for any unauthorized changes. You've got this! With these steps, you'll lock down your router and keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00334 · 25.6th percentile
Published
2025-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to…
    cvelistv5