This vulnerability (CVE-2025-62844) in QNAP QuRouter is classified under CWE-1390 and relates to weak authentication mechanisms. An attacker who has access to the local network can exploit this weakness to obtain sensitive information from the device. The issue affects QuRouter versions 2.6.x prior to 2.6.2.007. The CVSS 4.0 base score is 4.0, indicating medium severity, with attack vector limited to local network (AV:P), low attack complexity, and no privileges or user interaction required. The vendor has released an official fix in version 2.6.2.007 and later.

An attacker with local network access could exploit the weak authentication vulnerability to gain sensitive information from the affected QuRouter devices. This could lead to unauthorized disclosure of information. There is no indication of remote exploitation or privilege escalation beyond local network access. No known exploits are reported in the wild.

Upgrade affected QuRouter devices to version 2.6.2.007 or later, where the vulnerability has been fixed. Since an official fix is available, applying this update is the recommended remediation. No additional mitigation steps are indicated by the vendor advisory.