The NE6037 cable modem routers from SDMC Technology Co., Ltd running specific firmware versions contain hardcoded credentials in recovery endpoints (mgmt.php, npcmd.php) of the web management interface. An attacker can use these credentials without authentication to gain root access remotely. This access allows enabling filtered SSH and Telnet services, providing full control over the device. The vulnerability is remotely exploitable over the network without user interaction and requires no privileges. The CVSS 4.0 vector indicates high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the device is not a cloud service, so remediation depends on vendor action or user mitigation.

Successful exploitation results in unauthenticated remote root-level access to the affected NE6037 devices. Attackers can enable SSH and Telnet services, potentially leading to full compromise of the device and its network environment. This can severely impact device confidentiality, integrity, and availability. There are no known exploits in the wild currently, but the vulnerability is rated critical with a CVSS score of 9.3.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the device's management interface and monitor for any unusual activity. Avoid exposing the device management interface to untrusted networks. Follow vendor communications closely for updates on patches or official mitigations.