What’s Vulnerable › Vulnerabilities

CVE-2023-51741: Cleartext Submission of Password vulnerability in Skyworth Router

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-17 · updated 2026-06-17
• Weakness: CWE-319

Description

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Password Reset Page) of the vulnerable targeted system.

Affected products

• Hathway Skyworth Router CM5100: 4.1.1.24

References

• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0013
• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0013

Get alerted when CVE-2023-51741 or the next vulnerability affects your stack