CVE-2026-30704

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-30704", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-03-19T14:35:45.872Z", "dateReserved": "2026-03-04T00:00:00.000Z", "datePublished": "2026-03-18T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-18T17:01:46.645Z"}, "descriptions": [{"lang": "en", "value": "The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB"}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.made-in-china.com/showroom/yeapook/#:~:text=Established%20in%202015.%2CDistrict%2C%20Shenzhen%2C%20Guangdong%2C%20China"}, {"url": "https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cybersecurity/cve/2026/02/18/From-Blackbox-to-Whitebox-Multiple-CVEs-in-a-Consumer-WiFi-Extender.html"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-912", "lang": "en", "description": "CWE-912 Hidden Functionality"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-19T14:34:49.165423Z", "id": "CVE-2026-30704", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-19T14:35:45.872Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-30704", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-19T14:34:49.165423Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-912", "description": "CWE-912 Hidden Functionality"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-19T14:35:41.070Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://www.made-in-china.com/showroom/yeapook/#:~:text=Established%20in%202015.%2CDistrict%2C%20Shenzhen%2C%20Guangdong%2C%20China"}, {"url": "https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cybersecurity/cve/2026/02/18/From-Blackbox-to-Whitebox-Multiple-CVEs-in-a-Consumer-WiFi-Extender.html"}], "descriptions": [{"lang": "en", "value": "The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-18T17:01:46.645Z"}}}, "cveMetadata": {"cveId": "CVE-2026-30704", "state": "PUBLISHED", "dateUpdated": "2026-03-19T14:35:45.872Z", "dateReserved": "2026-03-04T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-03-18T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB"}, {"lang": "es", "value": "El extensor WiFi WDR201A (HW V2.1, FW LFMZX28040922V1.02) expone una interfaz UART desprotegida a trav\u00e9s de pads de hardware accesibles en la PCB."}], "id": "CVE-2026-30704", "lastModified": "2026-06-17T10:32:53.443", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30704", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-19T14:34:49.165423Z", "version": "2.0.3"}}]}, "published": "2026-03-18T18:16:28.077", "references": [{"source": "cve@mitre.org", "url": "https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cybersecurity/cve/2026/02/18/From-Blackbox-to-Whitebox-Multiple-CVEs-in-a-Consumer-WiFi-Extender.html"}, {"source": "cve@mitre.org", "url": "https://www.made-in-china.com/showroom/yeapook/#:~:text=Established%20in%202015.%2CDistrict%2C%20Shenzhen%2C%20Guangdong%2C%20China"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-912"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "LFMZX28040922V1.02"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "wifi_extender_wdr201a", "vendor": "shenzhen_yuner_yipu"}], "analysis": {"en": {"generated_at": "2026-03-19T16:27:08.140774+00:00", "value": {"mitigation_remediation": ["Verify the presence of exposed UART pads on the affected extender", "Physically disconnect or cover the UART pads to prevent unauthorized access", "If possible, disable the UART functionality in firmware or through configuration", "Implement physical security controls to restrict access to the device", "Maintain up\u2011to\u2011date firmware from the vendor or request a patch address", "Monitor for anomalous traffic or serial activity originating from the device"], "summary": {"action": "Assess impact", "impact": "Potential device takeover via open UART interface"}, "threat_synthesis": {"affected_systems": "The affected system is the Yeapook WiFi Extender model WDR201A, hardware version V2.1. The firmware in question is LFMZX28040922V1.02. No other vendors or product lines are listed as affected in the CVE entry.", "description_and_impact": "The WiFi Extender WDR201A (hardware version V2.1, firmware LFMZX28040922V1.02) contains an unprotected UART interface that is accessible through exposed hardware pads on the printed circuit board. This flaw allows an attacker to transmit commands directly to the device\u2019s processor without authentication, leading to potential arbitrary code execution, privilege escalation, or other unauthorized actions. The vulnerability is classified as CWE\u2011912, which indicates an improper identification or use of a device interface as being insecure or exposed. The specific impact is that an entity with physical access to the device can compromise the extender, potentially allowing further propagation or misuse of the network.", "risk_and_exploitability": "The CVSS score of 9.1 indicates a high severity assessment. EPSS is below 1%, denoting a low probability of exploitation in the wild, and the vulnerability is not currently included in the CISA KEV catalog. Based on the description, the exploit requires physical proximity to the exposed UART pads, so the attack vector is likely local or requires an attacker who can physically reach the device. Even though the exploitability is limited by this requirement, the potential for full device compromise warrants serious attention if the hardware is in a potentially insecure environment."}}}}, "created": "2026-03-19T08:57:00.456762+00:00", "title": "Unprotected UART Interface in Yeapook WDR201A WiFi Extender (CVE-2026-30704)", "updated": "2026-03-24T10:53:59.079619+00:00", "vendors": ["shenzhen_yuner_yipu", "shenzhen_yuner_yipu$PRODUCT$wifi_extender_wdr201a"]}