The U-SPEED N300 router version 1.0.0 lacks rate limiting and account lockout protections on its /api/login endpoint. This vulnerability allows an attacker on the local network to perform unlimited authentication attempts, facilitating brute-force attacks against the administrator account. Successful exploitation could lead to unauthorized access to the router's management interface.