The Quantum Networks Router QN-I-470 suffers from CWE-521 due to insufficient enforcement of strong password policies on its web management interface. This weakness enables attackers with network access to perform brute-force or password guessing attacks against user accounts, risking unauthorized device access. The CVSS 4.0 vector indicates the attack requires adjacent network access with high attack complexity and no privileges or user interaction needed. The vulnerability impacts version 6.1.1.B1 and was published on April 21, 2026. No patch or official remediation level has been disclosed.

Successful exploitation could lead to unauthorized access to the router, potentially allowing attackers to alter device configurations or disrupt network operations. The vulnerability requires the attacker to be on the same network segment and involves high attack complexity, which somewhat limits exploitability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict network access to the router's management interface to trusted hosts only and monitor for unusual login attempts. Implementing network-level protections such as segmentation or VPN access to the management interface can reduce exposure.