VULNERABILITY INTELLIGENCE
CVE-2022-3681
CVSS score6.5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2023-10-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network.
Weakness classification
- psirt@lenovo.com: CWE-287
Primary references
- psirt@lenovo.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory