CVE-2023-51741 is the second plaintext credential flaw in the Skyworth CM5100 router, firmware 4.1.1.24. The Password Reset page sends credentials unencrypted, so a listener on the network can read them. The record rates it High at 7.5. CERT-In advises upgrading to 4.1.1.25 or later.
What's affected
The record and the CERT-In advisory both name one product: the Skyworth CM5100 router (a cable modem router) running firmware 4.1.1.24. The CERT-In note says the fix is to upgrade to version 4.1.1.25 or later. The record does not list a fixed version of its own, so treat the CERT-In figure as the one to verify against Skyworth or your service provider.
The record gives a CVSS score of 7.5 (High). The CVSS vector reads as follows. The attack can be reached over the network, and the complexity is low. No account is needed. No user interaction is required. Impact on confidentiality is high, on integrity none, and on availability none. The weakness class is CWE-319.
How to check if you're exposed
Log in to the device's own web interface from a trusted wired connection and read the firmware version on the status or system information page. If it says 4.1.1.24, you are on the affected build. If you manage many devices, pull the firmware field from your asset inventory or provisioning system instead of visiting each one.
This is a hardware and firmware issue, so a package scanner will not see it. If the router was supplied by an internet provider, the provider may control firmware updates, so ask them which version they have pushed.
What to do now
- Confirm the firmware version on every CM5100 you run or support.
- Upgrade to 4.1.1.25 or later, as the CERT-In advisory recommends. If the provider manages the device, ask them for the update date.
- Until the update lands, avoid logging in to the router's web interface over untrusted or shared networks, and do not reuse its password anywhere else.
- Change the administrator password after updating, since it may have crossed the network in clear text before.
Why it matters
This is a sibling of CVE-2023-51740, which covers the login page of the same router. The weakness is the same, cleartext transmission of credentials, but the exposed page is the password reset form. Both were published on the same day and share one CERT-In advisory.
A password reset page deserves extra care. The person using it is changing the one secret that protects the device, and if that exchange is visible on the wire, the new or old password can be captured at exactly the moment it matters. That is why updating the firmware and then rotating the password is the right order.
Because the two CVEs share an advisory and a fix, one firmware update addresses both. Track them together in your records so one is not closed while the other is forgotten.
Quick check
How is this different from CVE-2023-51740?
It is the same class of flaw on a different page. 51740 concerns the login page, and this one concerns the password reset page.
Will one update cover both?
CERT-In lists a single fix, firmware 4.1.1.25 or later, for the vulnerabilities in the advisory. Confirm the exact coverage with the vendor.
Sources
Last reviewed: 19 October 2026.
