Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-30704 1 Shenzhen Yuner Yipu 1 Wifi Extender Wdr201a 2026-03-19 N/A
The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB
CVE-2026-30701 1 Shenzhen Yuner Yipu 1 Wifi Extender Wdr201a 2026-03-19 N/A
The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure mechanisms (in the form of Server Side Include) within multiple server-side web pages, including login.shtml and settings.shtml. These pages embed server-side execution directives that dynamically retrieve and expose the web administration password from non-volatile memory at runtime.