The vulnerability in GNCC GP5 v7.1.76 involves the insecure handling of sensitive wireless network information, which is output in plaintext to the serial UART interface during routine device operations. This design flaw permits an attacker with physical access to the device's serial console to capture sensitive credentials. No patch or official fix has been documented, and the device is not a cloud service, so remediation depends on vendor updates or device configuration changes. No CVSS score is assigned, and no known exploits have been observed.

An attacker with physical proximity and access to the device's serial UART interface can obtain sensitive wireless network credentials. This could lead to unauthorized network access if the attacker leverages the captured credentials. The impact is limited to scenarios where physical access to the serial console is possible, reducing the attack surface. No further impact details or exploitation reports are available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to the device's serial UART interface to trusted personnel only. Monitor vendor communications for updates regarding patches or configuration changes that mitigate this vulnerability.