CVE-2025-63362

CRITICAL 9.8CVE-2025-63362 · Published 04/12/2025 · updated 17/06/2026

In short

CVE-2025-63362 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.

References

drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view · Exploit
otsecverse.github.io/OTSecVerse/posts/Post-2 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free