https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63362.htmlhttps://patchthecve.com/cve/CVE-2025-63362.htmlWed, 17 Jun 2026 09:53:02 +0000CRITICAL 9.8: Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.https://patchthecve.com/cve/CVE-2025-63361.htmlhttps://patchthecve.com/cve/CVE-2025-63361.htmlWed, 17 Jun 2026 09:53:02 +0000MEDIUM 5.7: Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext.https://patchthecve.com/cve/CVE-2025-63363.htmlhttps://patchthecve.com/cve/CVE-2025-63363.htmlWed, 17 Jun 2026 09:53:03 +0000HIGH 7.5: A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadcashttps://patchthecve.com/cve/CVE-2025-63364.htmlhttps://patchthecve.com/cve/CVE-2025-63364.htmlWed, 17 Jun 2026 09:53:03 +0000HIGH 7.5: Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext.