CVE-2025-36535
CRITICAL10.0CVSS v3
—CVSS v2
0.42%
EPSS (exploit probability)
CWE-306CWE
Description
The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.