CVE-2023-7211
A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-249766 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published:Jan 7, 2024
Last Modified:Jun 3, 2025
EPS:Jan 7, 2024
EPSS Score:0.00081
CVSS Score:5.6
Affected Products
Vendor
Product
Action
Vendor
Uniwayinfo
Product
Uw-101x
Uniwayinfo
Uw-101x
Vendor
Uniwayinfo
Product
Uw-101x Firmware
Uniwayinfo
Uw-101x Firmware
Vendor
Uniwayinfo
Product
Uw-301vpw
Uniwayinfo
Uw-301vpw
Vendor
Uniwayinfo
Product
Uw-301vpw Firmware
Uniwayinfo
Uw-301vpw Firmware
Vendor
Uniwayinfo
Product
Uw-302vp
Uniwayinfo
Uw-302vp
Vendor
Uniwayinfo
Product
Uw-302vp Firmware
Uniwayinfo
Uw-302vp Firmware
Vendor
Uniwayinfo
Product
Uw-311vpw
Uniwayinfo
Uw-311vpw
Vendor
Uniwayinfo
Product
Uw-311vpw Firmware
Uniwayinfo
Uw-311vpw Firmware
Vendor
Uniwayinfo
Product
Uw-323dac
Uniwayinfo
Uw-323dac
Vendor
Uniwayinfo
Product
Uw-323dac Firmware
Uniwayinfo
Uw-323dac Firmware
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
