CVE-2019-7311

CVE-2019-7311 affects Linksys WRT1900ACS 1.0.3.187766 devices, stemming from a lack of encryption for the user login cookie (admin-auth). This vulnerability allows a local attacker to discover the router's administrator password, which is stored in base64 cleartext, and subsequently gain administrative access. Rated as High severity with a CVSS score of 7.8, the attack vector is local, requiring either network sniffing during login or physical access to the victim's computer. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.