CVE-2023-41027
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-41027 is a vulnerability affecting Juplink RX4-1500 Wifi routers running firmware versions V1.0.4 and V1.0.5. An authenticated attacker can exploit this issue by making requests to the '/webs/userpasswd.htm' endpoint, resulting in the disclosure of the administrative account password. This vulnerability poses a significant risk, as the attacker can gain unauthorized access to the router's configuration and potentially cause harm. It is crucial for users of these affected routers to apply the necessary patches as soon as possible to mitigate this credential disclosure issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions