U-speed WIFI4 N300 Router: Missing authentication on UART debug console
The U-speed WIFI4 N300 Router (model T1 Pro) v1.0.0 exposes a UART debug interface without authentication, authorization or access control. An attacker with physical access who solders wires to the UART pads and connects to the console gets an unauthenticated root shell on the device. No remote attack path is reported, but a root shell would expose the internal network and stored Wi-Fi credentials.
U-speed · WIFI4 N300 Router (T1 Pro)
