← Database

CVE-2024-9643

CRITICAL CVSS: 9.8 Published: 2025-02-04 Modified: 2026-06-17

Description

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645.

Affected Platforms

Four-Faith F3X36Four-Faith F3X36 Firmware

Weakness Type

CWE-489, CWE-798, CWE-798

References