{"id":"CVE-2021-28936","title":"The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request","summary":"The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known (default:admin) whereas no previous …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-863"],"vendor":"acexy","product":"wireless-n_wifi_repeater_firmware","affected":["wireless-n_wifi_repeater_firmware = 28.08.06.1"],"published":"2021-03-29","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-28936","references":[{"url":"http://wireless-n.com","label":"cve@mitre.org"},{"url":"https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990","label":"cve@mitre.org"},{"url":"http://acexy.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wireless-n.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.02044,"epssPercentile":0.80331,"ingestedAt":"2026-07-05T02:00:01.430Z","slug":"CVE-2021-28936","body":"## Overview\n\nThe Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known (default:admin) whereas no previous authentication is required.\n\n## Affected\n\n- `wireless-n_wifi_repeater_firmware = 28.08.06.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}