Edimax BR-6208AC Default Credentials Vulnerability in Authentication Function

A vulnerability exists in the Edimax BR-6208AC router running firmware version 2_1.02, specifically in the authentication function 'auth_check_userpass2'. This vulnerability arises from the use of hardcoded and easily guessable credentials, allowing remote attackers to bypass authentication and gain unauthorized access to the device. The issue is particularly concerning as the product is no longer supported by the vendor, who has acknowledged the vulnerability and plans to release a security advisory.

Impact

Exploitation of this vulnerability allows for unauthorized access to the device, bypassing authentication mechanisms. This could lead to unauthorized changes in device settings or management functions.