by Kastro
Paper/Archive/CVE-2025-67446

CVE-2025-67446

mitre — Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before.

EPSS 0.5%public exploitCVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.4.394 × 207.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value (e.g., setting it to "admin"), an attacker can bypass the authentication schema and gain unauthorized access to admin functionalities.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.8CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refneterbit.comexploitgithub.com/fun-beep/CVEs/tree/main/CVE-2025-67446