Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
Priority LOW 39CWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.
Summary
A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service (port 23) using static credentials.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00229 13th percentileScored 2026-11-07
Fix Fixed T-CPE301K 4G Mini WiFi Router (Shenzhen Dbit Network Equipment): 29/09/2026
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Shenzhen Dbit Network Equipment | T-CPE301K 4G Mini WiFi Router | before 29/09/2026 | 29/09/2026 | Patch available | CNA |
- T-CPE301K 4G Mini WiFi Router VendorShenzhen Dbit Network Equipment Affected before 29/09/2026 Fixed in 29/09/2026 Patch available CNA
Remediation
- Fix · CNA T-CPE301K 4G Mini WiFi Router (Shenzhen Dbit Network Equipment) Fixed in 29/09/2026
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router 29/09/2026
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-06312 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network EquipmentPriority MEDIUM 48
Timeline
- 2026-10-02 Threatist record created from CVE-2026-7193
- 2026-10-03 Alias added: GHSA-p9fj-gqf6-634v
References
More Shenzhen Dbit Network Equipment vulnerabilities
- TI-2026-06312 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment CVSS 4.0CRITICAL 9.3
Sources
- CVE-2026-7193 · CVE Program
- CVE-2026-7193 · NVD
- FIRST EPSS
- GHSA-p9fj-gqf6-634v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences