Waveshare Serial to Ethernet/Wi-Fi Gateway Firmware Vulnerability

The Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway is a network device that allows users to connect their devices to the internet using a serial connection. This vulnerability, discovered in firmware version 3.1.1.0, renders the Administrator password in plaintext, making it easily accessible to attackers.

Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Immediately update to firmware version 3.1.2.0 or later, which can be downloaded from the Waveshare website.
2. If an immediate update isn't possible, restrict network access to your Waveshare device (firewall it from the public internet) and monitor for suspicious activity.

• drive.google.com
• otsecverse.github.io