GCVE - cpe:2.3:o:evenroute:iqrouter_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:evenroute:iqrouter_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Evenroute (`365dd6eb-6ca4-5eeb-bf14-522b0d2b5baf`)
Product	Iqrouter Firmware (`9a994456-2a08-5c67-a962-c230dbdbc0e4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-11968`	vulnerable	2026-06-08 05:17:55.881250	Details available In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Published: 2020-04-21T12:07:43.000Z Updated: 2024-08-04T11:48:56.976Z Open on db.gcve.eu Reference links https://evenroute.com/ https://pastebin.com/grSCSBSu https://openwrt.org/docs/guide-quick-start/walkthrough_login https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11967`	vulnerable	2026-06-08 05:17:55.880858	Details available In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Published: 2020-04-21T12:08:11.000Z Updated: 2024-08-04T11:48:56.413Z Open on db.gcve.eu Reference links https://evenroute.com/ https://pastebin.com/grSCSBSu https://openwrt.org/docs/guide-quick-start/walkthrough_login https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11966`	vulnerable	2026-06-08 05:17:55.880265	Details available In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Published: 2020-04-21T12:06:12.000Z Updated: 2024-08-04T11:48:56.416Z Open on db.gcve.eu Reference links https://evenroute.com/ https://pastebin.com/grSCSBSu https://openwrt.org/docs/guide-quick-start/walkthrough_login https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11965`	vulnerable	2026-06-08 05:17:55.879637	Details available In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access via SSH. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Published: 2020-04-21T12:05:49.000Z Updated: 2024-08-04T11:48:56.416Z Open on db.gcve.eu Reference links https://evenroute.com/ https://pastebin.com/grSCSBSu https://openwrt.org/docs/guide-quick-start/walkthrough_login https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11964`	vulnerable	2026-06-08 05:17:55.878979	Details available In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Published: 2020-04-21T12:05:27.000Z Updated: 2024-08-04T11:48:56.403Z Open on db.gcve.eu Reference links https://evenroute.com/ https://pastebin.com/grSCSBSu https://openwrt.org/docs/guide-quick-start/walkthrough_login https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11963`	vulnerable	2026-06-08 05:17:55.873149	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.