Waveshare vulnerabilities
We track 3 vulnerabilities in Waveshare products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 4, 2025.
Latest Waveshare vulnerabilities
- 9.8 Critical severity
Rs232/485 To WiFi Eth (b) Firmware: Unverified Password Change
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication.
- 7.5 High severity
Rs232/485 To WiFi Eth (b) Firmware: Improper Access Control
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication
- 7.5 High severity
Rs232/485 To WiFi Eth (b) Firmware: Cleartext Transmission of Sensitive Information
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext.