Vulnerability Description
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
References
- https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589
- https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu
FAQ
What is CVE-2026-79589?
CVE-2026-79589 is a documented vulnerability. The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure...
How severe is CVE-2026-79589?
CVSS scoring is not yet available for CVE-2026-79589. Check NVD for updates.
Is there a patch for CVE-2026-79589?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.