CVE-2023-51741

Name of the Vulnerable Software and Affected Versions Skyworth Router CM5100 version 4.1.1.24

Description This issue exists due to the transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this by eavesdropping on the victim’s network traffic to extract the username and password from the web interface, specifically the Password Reset Page, of the targeted system.

Recommendations For Skyworth Router CM5100 version 4.1.1.24, consider disabling the Password Reset Page functionality until a patch is available to prevent exploitation. Restrict access to the web interface to minimize the risk of eavesdropping and credential extraction.