Skip to content
OpenAdvisories

Vendor

Pix-Link

2 known vulnerabilities.

Products

LV-WR21Q 2 WR21Q 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-12387

    Denial of Service in Pix-Link LV-WR21Q

    A vulnerability in the Pix-Link LV-WR21Q router's language module allows remote attackers to trigger a denial of service (DoS) by sending a specially crafted HTTP POST request containing non-existing language parameter. This renders the server unable to serve…

    Pix-Link LV-WR21Q WR21Q
  • Medium 6.9
    CVE-2025-12386

    Missing Authentication for Critical Endpoint in Pix-Link LV-WR21Q

    Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point. The vendor was notified early about this …

    Pix-Link WR21Q LV-WR21Q