Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Pix-Link LV-WR21Q does not enforce any form of authentication for endpoint /goform/getHomePageInfo. Remote unauthenticated attacker is able to use this endpoint to e.g: retrieve cleartext password to the access point. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version V108_108 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-12386 Unauthenticated Information Disclosure in Pix-Link LV-WR21Q Router Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-12386
Post summary
CVE‑2025‑12386 is an unauthenticated information disclosure vulnerability affecting the Pix‑Link LV‑WR21Q router, reported via Vulmon, with no evidence of exploitation or mitigation information.