The Neterbit NW-431F Router firmware version 20241014-IR03 and earlier contains an authentication bypass vulnerability due to the use of a weak and predictable authentication cookie. An attacker can manipulate this cookie value, such as setting it to "admin", to bypass the authentication mechanism and gain unauthorized administrative access to the router. This vulnerability is remotely exploitable without any privileges or user interaction and has a CVSS 3.1 base score of 9.8, reflecting critical severity. No patch or official remediation has been published by the vendor as of the current information.

Successful exploitation allows an unauthenticated attacker to gain full administrative access to the affected router, compromising confidentiality, integrity, and availability of the device and potentially the network it manages. This could lead to unauthorized configuration changes, interception or redirection of network traffic, and disruption of network services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the router's management interface to trusted hosts only and consider isolating the device from untrusted networks. Monitor vendor communications closely for updates and apply patches promptly once released.