U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local netw…

U-SPEED N300 router V1.0.0 contains a vulnerability that allows unlimited authentication attempts on the /api/login endpoint. The lack of rate limiting or account lockout protections enables attackers on the local network to perform brute-force attacks against the administrator account. This vulnerability could lead to unauthorized access to the router management interface. The vulnerability affects the authentication mechanism and represents a significant security weakness in network infrastructure devices.