Vulnerability · Published Jan 25, 2026 · Assigned by VulDB
CVE-2026-1408Beetel 777VR1 UART weak password
Low 2.0
In plain English
A low-severity security flaw in 777VR1 from Beetel. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Official description
A weakness has been identified in Beetel 777VR1 up to 01.00.09/01.00.09_55. This vulnerability affects unknown code of the component UART Interface. Executing a manipulation can lead to weak password requirements. The physical device can be targeted for the attack. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
Weakness: CWE-521 · Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-342797 | Beetel 777VR1 UART weak password vdb-entry, technical-description
- VDB-342797 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #739384 | Beetel Beetel 777VR1 Broadband Router Firmware Version: V01.00.09 / V01.00.09_55 CWE-521 — Weak Password Requirements third-party-advisory
- https://gist.github.com/raghav20232023/9c51cbd91f3798b1c10f3f30fb631633 exploit