CVEvulnerability

CVE-2023-45194

4.3 MEDIUM Published 2023-10-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-798

Description

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration.

Affected configurations

• mrl mr-gm3-d firmware (< 1.04.00) • mrl mr-gm3-k firmware (< 1.04.00) • mrl mr-gm3-s firmware (< 1.04.00) • mrl mr-gm3-dks firmware (< 1.04.00) • mrl mr-gm3-m firmware (< 1.04.00) • mrl mr-gm2 firmware (< 3.01.00) • mrl mr-gm3-w firmware (< 1.04.00)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References