VYPR

CF-WR630AX

by Comfast

CVEs (2)

  • CVE-2024-54751CriDec 10, 2024
    risk 0.64cvss 9.8epss 0.00

    COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

  • CVE-2026-12814Jun 21, 2026
    risk 0.00cvss epss 0.02

    A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8. This issue affects the function system of the file /cgi-bin/mbox-config?section=ping_config of the component API Endpoint. This manipulation of the argument destination causes os command injection. The attack is…