Skip to content
OpenAdvisories
Unscored CVE-2023-45194 EUVD-2023-49501GHSA-h49v-gcm2-4fm3

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.…

Published Oct 11, 2023 · Updated Sep 18, 2024 · Assigned by jpcert

Description

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration.

Affected products

VendorProductAffectedFixed
Micro Research MR-GM2 firmware Ver. 3.00.03 and earlier —
Micro Research MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier —

References