The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645.
The product is released with debugging code still enabled or active.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| F3x36_firmware | Four-faith | 2.0 (including) | 2.0 (including) |