Pix-Link LV-WR21Q Missing Authentication Vulnerability in Homepage Info Endpoint
Vulnerability
A vulnerability exists in the Pix-Link LV-WR21Q router in version V108_108, where the endpoint '/goform/getHomePageInfo' lacks authentication. This flaw allows remote, unauthenticated attackers to access sensitive information, such as the cleartext password for the access point. While only version V108_108 has been confirmed vulnerable, other versions may also be affected.
Impact
Exploitation of this vulnerability allows for unauthorized access to sensitive information, specifically the cleartext password of the access point.
Added: Jan 27, 2026, 12:18 PM
Updated: Jan 27, 2026, 3:06 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.9remediation
0.0relevance
2.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.