Executive Summary

This vulnerability occurs in Naxclow device firmware during WiFi association, where the device prints sensitive information such as the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware.

The UART pads are labeled, use default serial settings, and provide access to an interactive RT-Thread shell that allows arbitrary memory reads, enabling full firmware extraction.

An attacker with brief physical access to the device, which is common for outdoor-mounted devices, can recover WiFi credentials and launch firmware-side attacks.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized recovery of WiFi credentials, including SSID, PSK, and WPA keys, by an attacker with physical access to the device.

With these credentials, an attacker can gain unauthorized network access and perform firmware extraction, potentially enabling further attacks on the device or network.

Useful 0 Not Useful 0