The vulnerability stems from leftover engineering diagnostics and factory-level diagnostic software that remains exposed on retail copies of the router, allowing malicious applications to write directly to internal non‑volatile memory registers. By modifying these registers, an attacker could change firmware configuration, corrupt settings, or insert persistent malicious code, effectively compromising the device’s integrity and potentially its availability. The weakness fits CWE‑134, which addresses uncontrolled format strings that can lead to arbitrary code execution or data modification.

Acer Connect M6E 5G Portable WiFi Router. No specific firmware versions are listed, so any retail build that has not applied the vendor’s fix is potentially affected.

The CVSS score of 8.8 indicates a high severity with a broad impact. Because EPSS is not available and the issue is not listed in the CISA KEV catalog, current public exploitation data is unclear. However, the likely attack vector is inferred to be local or remote via malicious applications that can access the exposed diagnostics interface, allowing an attacker to elevate privileges on the device. Consequently, the risk remains high, especially for unpatched devices in uncontrolled environments.