56 matches found
CVE-2023-41029
CVE-2023-41029 affects the Juplink RX4-1500 Wifi router. Vulnerable component: homemng.htm endpoint in firmware versions V1.0.2–V1.0.5. Issue: command injection allowing an authenticated remote attacker to run arbitrary commands as root via specially crafted HTTP requests. Attack surface is netwo...
CVE-2023-41027 Juplink RX4-1500 Credential Disclosure Vulnerability
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint...
CVE-2023-41027 Juplink RX4-1500 Credential Disclosure Vulnerability
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint...
CVE-2023-41027
Summary: CVE-2023-41027 affects Juplink RX4-1500 WiFi router firmware v1.0.4 and v1.0.5. The issue allows credential disclosure through the vulnerable endpoint “/webs/userpasswd.htm,” enabling an authenticated attacker to leak the administrative password. The problem is documented across multiple...
Juplink RX4-1500 Security Vulnerability
The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5, which originates from an information disclosure vulnerability in the /webs/userpasswd.htm endpoint. An attacker can exploit the...
PT-2023-27747 · Juplink · Juplink Rx4-1500
Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 Description: The issue allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint "/webs/userpasswd.htm"...
PT-2023-27751 · Unknown · Juplink Rx4-1500
Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 versions V1.0.2 through V1.0.5 Description: The issue allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint "homemng.htm". This enables attackers to inject command...
Juplink RX4-1500 Command Injection Vulnerability
Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router that stems from a command injection vulnerability in the homemng.htm endpoint. An attacker can exploit the vulnerability by sending a specially crafted HTTP request to execute...
Juplink RX4-1500 Command Injection Vulnerability
Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router that originates from a command injection vulnerability in the homemng.htm endpoint. An attacker can exploit the vulnerability by sending a specially crafted request to execute...
The vulnerability of the microprogrammed Wi-Fi router software from Juplink RX4-1500, related to the use of pre-installed credentials, allows a hacker to escalate their privileges.
The vulnerability of the microprogrammed Wi-Fi router software from Juplink RX4-1500 lies in the use of pre-set login credentials. Exploiting this vulnerability allows a remote attacker to enhance their privileges by connecting through a web interface or Telnet service...
CVE-2023-41030
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...
CVE-2023-41030
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...
Hardcoded credentials
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...
CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...
CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...
CVE-2023-41030
CVE-2023-41030 affects Juplink RX4-1500 wi-fi router. Vulnerable versions V1.0.2–V1.0.5 permit unauthenticated login to web interface or Telnet as the user user due to hard-coded credentials. Connected sources corroborate the affected versions and login as user; explicit exploitation details are ...
Juplink RX4-1500 Trust Management Issue Vulnerability
The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 versions V1.0.2 through V1.0.5, which stems from the use of hard-coded credentials, which allows an attacker to log in to the web interface or Telnet service as the user user...
CVE-2023-41028
A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...
CVE-2023-41028
A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...
Stack overflow
A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...