Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-41027

Juplink RX4-1500 Credential Disclosure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
XI

Description

Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juplink RX4-1500

Default version status: unknown

  • V1.0.5affected
  • V1.0.4affected

References