CVE-2025-22936 describes a vulnerability in specific Smartcom Bulgaria AD Smartcom Ralink WiFi router models where the default WiFi password generation algorithm is weak. This weakness allows a remote attacker to obtain sensitive information from the device. The CVSS v3.1 vector indicates the attack is remote (AV:A), with low attack complexity (AC:L), requiring low privileges (PR:L), and no user interaction (UI:N). The impact is confidentiality high (C:H) with no impact on integrity or availability. There is no vendor advisory or patch information available, and no known exploits have been reported.

The vulnerability allows a remote attacker with low privileges and no user interaction to obtain sensitive information by exploiting the weak default WiFi password generation algorithm. This compromises the confidentiality of the affected routers. There is no reported impact on integrity or availability. No known exploits in the wild have been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is released by Smartcom Bulgaria AD, users should consider changing default WiFi passwords to strong, unique passphrases and restrict remote access to the router management interface where possible.