CVE-2023-41030

Critical

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or…

XI·CWE-259·Published 2023-09-18

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

174 chars

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user.

NVDen

174 chars

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user.

NVDes

197 chars

Las credenciales codificadas en Juplink RX4-1500 versiones V1.0.2 a V1.0.5 permiten a los atacantes no autenticados iniciar sesión en la interfaz web o en el servicio telnet como usuario "usuario".

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	cve.org	5.8	—	—	AV:A/AC:L/Au:N/C:P/I:P/A:P
2.0	Secondary	NVD	5.8	6.5	6.4	AV:A/AC:L/Au:N/C:P/I:P/A:P