CP-XR-DE21-S Router vulnerabilities

2 known vulnerabilities in CP-XR-DE21-S Router from CP Plus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  CP-XR-DE21-S Router: Use of Hard-coded Credentials

  CVE-2026-19412Aug 28, 2026CP Plus

  This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local netwo

• 8.6 High severity

  CP-XR-DE21-S Router: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

  CVE-2025-0479Jan 20, 2025CP Plus

  This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Succe