AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-36754

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-13 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. See the original NVD description below for full technical details.

CVE
CVE-2025-36754
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%

Original NVD Description

The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for instance to point the device to an arbitrary address for domain name resolution to e.g. facililitate a man-in-the-middle (MitM) attack.