Cudy WR3000H V1.0 V2.4.5 is discovered to contain an Offline Password Guessing vulnerability. This vulnerability allows local attackers to execute Offline Password Guessing attack.

Cudy has released firmware 2.5.30 which fixed this issue.

The router accepts administrator authentication over plaintext HTTP. A captured request therefore allows unrestricted offline validation of candidate passwords. The successful response creates the sysauth session cookie without the Secure attribute.

Muhamed Fakhri Sabour — Security Researcher, Computer & Information Engineering Student, Ninevah University, Iraq.