PatchTheCVECVE-2019-7564: An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices
CVE-2019-7564 is a critical-severity flaw (CVSS 9.8) affecting rt3052 firmware, rt3050 firmware, wm3300 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.
Why this priority
- Critical severity
- Public exploit reference
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 3.0% (top 12%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2019-05-07 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-7564?
rt3052 firmware: mitigate or apply the listed mitigation; rt3050 firmware: mitigate or apply the listed mitigation; wm3300 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2019-7564 being exploited?
CVE-2019-7564 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-7564 affect?
CVE-2019-7564 affects rt3052 firmware, rt3050 firmware, wm3300 firmware. Severity is critical (CVSS 9.8). An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.a
How urgent is CVE-2019-7564?
Priority 66/100. Critical severity; Public exploit reference; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2019-6441 CRITICAL 9.8 MITIGATE MITIGATE An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54
- CVE-2018-8772 MEDIUM 6.1 MITIGATE Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen.