The flaw in Netcore POWER13’s routerd.passwd_set function allows an attacker to trigger a password reset remotely without proper authentication. The fault lies in inadequate input validation and lack of access controls, which results in weak password recovery. The description presents this as an exploitable weakness that can lead to unauthorized account takeover if an attacker can force a password reset to an account they control or to a publicly known address.

This vulnerability affects Netcore POWER13 firmware version 2.0.240730.162638 and any device running that build. All models that ship with the stated firmware are potentially impacted, and the attack can be carried out from any network that can reach the ubus service.

The CVSS score of 6.9 classifies the risk as moderate, and the EPSS score is not disclosed, so the private likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog The attack vector is inferred to be remote, as the exploit may be performed from a remote host that can access ubus. Because the flaw permits a password reset without authentication, an attacker who controls the device’s network can immediately gain administrative access to the router. The lack of an official patch or workaround heightens the urgency of mitigation steps.