Rx1800 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:victure:rx1800_firmware:en_v1.0.0_r12_110933:*:*:*:*:*:*:*

part: o version: en_v1.0.0_r12_110933 update: *

VendorVicture (b8b60dbe-486d-575d-9c70-52cc037729d1)
ProductRx1800 Firmware (54c0a688-72a4-5f2d-ab19-1a16366fd2a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-53941 vulnerable 2026-06-08 06:54:15.724930 Details available
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default Wi-Fi PSK value via the last 4 octets of the BSSID.
Published: 2024-12-02T00:00:00.000Z
Updated: 2024-12-03T18:50:25.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53940 vulnerable 2026-06-08 06:54:15.724492 Details available
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection. Attackers can exploit this by sending crafted payloads through parameters intended for the ping utility, enabling arbitrary command execution with root-level permissions on the device.
Published: 2024-12-02T00:00:00.000Z
Updated: 2024-12-03T18:48:22.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53939 vulnerable 2026-06-08 06:54:15.724106 Details available
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The /cgi-bin/luci/admin/opsw/Dual_freq_un_apple endpoint is vulnerable to command injection through the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute arbitrary commands on the device (with root-level permissions) via crafted input.
Published: 2024-12-02T00:00:00.000Z
Updated: 2024-12-03T18:54:24.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53938 vulnerable 2026-06-08 06:54:15.723651 Details available
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve full control over the router remotely without any authentication.
Published: 2024-12-02T00:00:00.000Z
Updated: 2024-12-03T18:58:39.026Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53937 vulnerable 2026-06-08 06:54:15.723122 Details available
An issue was discovered on Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions. Device setup does not require this password to be changed during setup in order to utilize the device. (However, the TELNET password is dictated by the current GUI password.)
Published: 2024-12-02T00:00:00.000Z
Updated: 2024-12-03T18:52:23.081Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.