The U-SPEED N300 router is vulnerable to unauthenticated brute-force attacks due to missing rate limiting, which could lead to unauthorized administrative access.

This vulnerability is a lack of authentication protection mechanisms on the /api/login endpoint. An unauthenticated attacker on the local network can conduct unlimited authentication attempts, facilitating unauthorized access to the router management interface.

The absence of rate limiting allows for high-speed brute-force attacks against the administrative credentials of the device. A successful compromise grants the attacker full control over the router, potentially leading to unauthorized network access, traffic interception, or complete device takeover. With a CVSS score of 7.5, this high-severity vulnerability poses a significant risk to the security and integrity of internal network communications.

Immediate Action: Since no official vendor patch is currently confirmed, administrators should restrict access to the router management interface to trusted IP addresses only. Disable remote management features if they are not strictly required for business operations.

Proactive Monitoring: Monitor device access logs for high volumes of failed login attempts originating from a single source or unusual patterns of activity directed at the /api/login endpoint.

Compensating Controls: Implement network-level access control lists (ACLs) to isolate the management interface from untrusted segments of the network. If the router supports it, utilize a VPN for any necessary remote administrative access rather than exposing the interface to the local or wide area network.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the research reference provided by the CVE record.

Given the high-severity nature of this vulnerability and the availability of a proof-of-concept, immediate action is required to harden the device configuration. Administrators must limit exposure of the management interface to mitigate the risk of unauthorized access while awaiting potential vendor remediation.