cvedb.io
CVE-2018-8755
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-06-25T15:29:00.537 · Last modified 2026-06-17T02:05:20.243

Summary

NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials. By downloading this file, an attacker can access the admin password, WPA key, and any config information of the device.

Affected products

nucom — wr644gacv_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when nucom ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.