CVE-2020-11966

In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily.

Source: CVE-2020-11966