CVE-2025-67446: Critical severity Neterbit NW-431F Router vulnerability
Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value (e.g., setting it to "admin"), an attacker can bypass the authentication schema and gain unauthorized access to admin functionalities.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Reconfigure the device so authentication does not rely on a weak/predictable cookie. Ensure session cookies are generated using a cryptographically strong random value, validated server-side, and that clients cannot bypass authentication by setting the cookie (for example, disable any feature that accepts a fixed/name-based cookie such as 'admin' for auth).
Neterbit NW-431F Router authentication cookie / session handling = use randomized, unpredictable session cookie values and do not accept user-supplied predictable values - Compensating control
Restrict access to the router management interface to trusted IPs using firewall rules or ACLs and/or place the management interface on a management-only network or VPN. Block or limit remote/admin web access from untrusted networks until the device is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67446?
CVE-2025-67446 has a critical severity rating of 9.8.
How do I fix CVE-2025-67446?
To fix CVE-2025-67446, update the Neterbit NW-431F Router to the latest firmware version released after June 4, 2026.
What type of vulnerability is CVE-2025-67446?
CVE-2025-67446 is categorized as an Improper Authentication vulnerability, specifically an Authentication Bypass.
Who is affected by CVE-2025-67446?
Users of the Neterbit NW-431F Router firmware version 20241014-IR03 or earlier are affected by CVE-2025-67446.
What impact does CVE-2025-67446 have on Neterbit NW-431F Router?
CVE-2025-67446 allows attackers to bypass authentication and gain unauthorized access to the router.