CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
2 CVEs tagged to acer / wave_7 — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.
The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key. This allows an attacker to decrypt, modify, and re-encrypt system backup…
The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leadi…