MEDIUM🇬🇧 English

CVE-2023-41030

CVSS 6.3v3.1pub. 2023-09-18upd. 2024-11-21

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Juplink Rx4 1500

    HW
    Juplink
    wszystkie wersje

  • Juplink Rx4 1500 Firmware

    OS
    Juplink
    1.0.2 – 1.0.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2023-41028CRITICAL9.0ten sam produkt

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An a...

CVE-2023-41027HIGH8.0ten sam produkt

Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions...

CVE-2023-41029HIGH8.0ten sam produkt

Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions ...

CVE-2023-41031HIGH8.0ten sam produkt

Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote...

CVE-2020-8797MEDIUM6.7ten sam produkt

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized ...