CPE
The XWEB EVO product line (versions 4.3.0-5.8.8) is vulnerable to unauthorized remote access because its 'xwpasswd' firmware component derives Administrator passwords solely from the device MAC address and current date.