CVE-2026-36738 - CERT CVE
ID CVE-2026-36738
Sažetak U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain unrestricted access to device functionality.
Reference
CVSS
Base: 6.8
Impact: 5.9
Exploitability:0.9
Pristup
VektorSloženostAutentikacija
PHYSICAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Zadnje važnije ažuriranje 14-05-2026 - 15:16
Objavljeno 13-05-2026 - 16:16