Uniway Router Administrative Web Interface reliance on ip address for authentication

published 2024-01-07 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-59392

cvss: 5.6; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.9%; EPSS 0.9% chance of exploitation in 30 days, percentile 61%
public exploits: 0; none known

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-249766 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 18 mo ago (2025-05-08)

Exploit prediction

0.94% chance of exploitation in the next 30 days, higher than 61% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

drive.google.com https://drive.google.com/file/d/11thSuALGcn0C_9tbmYu8_QzTXtBnCoNS/view?usp=sharing referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CNA	3.0	5.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CNA	2.0	5.1	AV:N/AC:H/Au:N/C:P/I:P/A:P
NVD	3.1	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Uniway Router

Classification

Weakness

CWE-291 Reliance on IP Address for Authentication
CWE-287 Improper Authentication

References

drive.google.com /file/d/11thSuALGcn0C_9tbmYu8_QzTXtBnCoNS/view?usp=sharing
exploit
vuldb.com /?id.249766
vdb-entry, permissions-required, third-party-advisory
vuldb.com /?ctiid.249766
signature, permissions-required, vdb-entry

Sources

CVE List CVE-2023-7211
NVD CVE-2023-7211

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary