The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes the console without authentication on the WAN IP address regardless of the Web Management via WAN setting, which allows remote attackers to bypass intended access restrictions via HTTP requests.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Smart_travel_router | Satechi | 1.5 (including) | 1.5 (including) |