CVE-2025-28202

Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services without authentication.

CVE-2025-28203

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.