CVE-2025-28200

The device's default password is deterministically derived from the MAC address, which is publicly broadcast during wireless network operation. Knowing the router's MAC address—easy to intercept through passive listening—an attacker can calculate or guess the default password without any user intervention. The vulnerability is classified as CWE-521 (Weak Password Requirements), meaning there is no requirement to change the password to a strong one before first use.

An attacker can gain full unauthorized access to the router's administrative panel, enabling device takeover, network configuration changes, network traffic interception, and potential use of the router as an entry point to the internal network.

Immediately change the default administrator password to a strong, unique password unrelated to the device's MAC address. Apply patches available from the manufacturer according to references. Until updates are applied, it is recommended to restrict access to the administrative panel to the local network only and disable remote management.

Govicture RX1800 with firmware version EN_V1.0.0_r12_110933