CVE-2021-28936

CVE-2021-28936 describes an authentication bypass vulnerability in the Acexy Wireless-N WiFi Repeater REV 1.0 firmware, allowing an unauthenticated attacker to change the administrator password via a crafted HTTP GET request if the default username "admin" is known. This vulnerability carries a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity and without user interaction, leading to a complete compromise of the device's administrative control. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, the potential for unauthorized administrative access remains significant.