CVE-2021-28937

PoC —

CVSS 3.1

7.5 high

EPSS

4%p90

Published

Mar 29, 2021 (Mar 29, 2021)

Modified

Jul 9, 2026

Description

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) contains the administrator account password in plaintext. The page can be intercepted on HTTP.

Vendors: acexy
Products: wireless-n wifi repeater firmware
Weakness: CWE-312
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.2%)

In the news0 stories

No ingested article mentions this CVE yet.