CVE-2020-24104

Name of the Vulnerable Software and Affected Versions PIX-Link Repeater/Router LV-WR07 version v28K.Router.20170904

Description The issue allows attackers to steal credentials without being connected to the network, using a crafted ESSID as the attack vector, specifically targeting the SET2 parameter in the wireless.htm page.

Recommendations For PIX-Link Repeater/Router LV-WR07 version v28K.Router.20170904, avoid using the SET2 parameter in the wireless.htm page until the issue is resolved. Consider changing the ESSID to a random value and restricting access to the wireless network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.