CVE-2025-43980

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the credentials of root/admin. The GUI doesn't offer a way to disable the account...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

FIRSTNUM JC21A-04 安全漏洞

The FIRSTNUM JC21A-04 is a router from the Chinese company FIRSTNUM. A security vulnerability exists in the FIRSTNUM JC21A-04 version 2.01ME/FN and earlier, which originates from an arbitrary system command that can be executed via the xmlaction.cgi endpoint...

PT-2025-31941 · Firstnum · Firstnum Jc21A-04

Name of the Vulnerable Software and Affected Versions: FIRSTNUM JC21A-04 devices versions through 2.01ME/FN Description: An issue allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xml action.cgi?method= endpoint. Recommendation...

PT-2025-31947 · Firstnum · Firstnum Jc21A-04

Name of the Vulnerable Software and Affected Versions: FIRSTNUM JC21A-04 devices versions through 2.01ME/FN Description: FIRSTNUM JC21A-04 devices enable the SSH service by default with the credentials root/admin. The graphical user interface GUI does not provide a method to disable this account...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

CVE-2025-43980

The FIRSTNUM JC21A-04 router is vulnerable in versions through 2.01ME/FN because the SSH service is enabled by default using the default credentials root/admin . The graphical user interface (GUI) lacks an option to disable this account. Impacted users are encouraged to either change the default ...

CVE-2025-43980

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the credentials of root/admin. The GUI doesn't offer a way to disable the account...

CVE-2025-43979

The FIRSTNUM JC21A-04 router is vulnerable to an arbitrary OS command injection flaw in versions through 2.01ME/FN . An authenticated attacker can execute system commands with root privileges by sending crafted payloads to the xml_action.cgi?method= endpoint. To remediate this issue, users are re...