Approved changes feed: RSS · Atom

cpe:2.3:a:juplink:rx4-1500:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJuplink (e0ff7bca-ab49-5d8a-9442-0e021a0dcd6d)
ProductRx4 1500 (ea0cb2c5-b64c-5faa-b161-b7da3b3a6852)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41031 vulnerable 2026-06-08 06:11:04.845309 Juplink RX4-1500 homemng.htm Command Injection Vulnerability
HIGH (8)
Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint.
Published: 2023-09-22T16:07:59.041Z
Updated: 2024-09-24T18:03:52.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41030 vulnerable 2026-06-08 06:11:04.844389 Juplink RX4-1500 Hard-coded Credential Vulnerability
MEDIUM (6.3)
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user.
Published: 2023-09-18T18:22:08.377Z
Updated: 2024-09-25T14:05:54.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41029 vulnerable 2026-06-08 06:11:04.840373 Juplink RX4-1500 Command Injection Vulnerability
HIGH (8)
Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint.
Published: 2023-09-22T16:07:12.826Z
Updated: 2024-09-24T18:05:12.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41028 vulnerable 2026-06-08 06:11:04.831418 Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability
CRITICAL (9)
A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.
Published: 2023-08-23T21:47:26.833Z
Updated: 2024-10-03T13:39:37.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41027 vulnerable 2026-06-08 06:11:04.828644 Juplink RX4-1500 Credential Disclosure Vulnerability
HIGH (8)
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.
Published: 2023-09-22T16:06:05.266Z
Updated: 2024-09-24T18:06:58.998Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.