CVE-2026-30704 - Vulnerability Analysis

Overview

WiFi Extender WDR201A HW V2.1, FW LFMZX28040922V1.02 contains an insecure UART interface caused by unprotected hardware pads on the PCB, letting attackers access the device hardware interface, exploit requires physical access to the device.

Severity & Score

Impact

Attackers with physical access can interact with the device hardware, potentially leading to device compromise or data extraction.

Mitigation

Restrict physical access or update firmware to secure UART interface if available.

References

• https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cybersecurity/cve/2026/02/18/From-Blackbox-to-Whitebox-Multiple-CVEs-in-a-Consumer-WiFi-Extender.html
• https://www.made-in-china.com/showroom/yeapook/#:~:text=Established%20in%202015.%2CDistrict%2C%20Shenzhen%2C%20Guangdong%2C%20China

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner