Mohammed Fakhri Sabour, a student in the Department of Computer and Informatics Engineering at the College of Electronics Engineering, Ninevah University, has discovered a security vulnerability in the Cudy WR3000H networking device manufactured by Cudy, following specialized technical testing and analysis.
The vulnerability concerns the protection mechanism for authentication data and could potentially allow offline password-guessing attacks. The student reported the vulnerability to the company in accordance with responsible disclosure procedures. It was subsequently published in the company’s official security advisories under the identifier Cudy-SA-26-9-I1YYA5, and a security update was released to address the issue.
As part of documenting this achievement, the student included Ninevah University on the acknowledgements page published on the company’s website, expressing his academic affiliation and pride in his university.
This discovery highlights the research and technical efforts of Ninevah University students, particularly in information security and networking. Such achievements enable students to apply their academic knowledge to real-world technical challenges while developing their practical skills.
Official Security Advisory:
https://www.cudy.com/pages/security-advisory/cudy-sa-26-9-i-1-yya-5