CVE-2020-11964

In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the root password arbitrarily.

Source: CVE-2020-11964