Juplink vulnerabilities
We track 5 vulnerabilities in Juplink products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2023.
Latest Juplink vulnerabilities
- 8.8 High severity
RX4-1500: Improper Neutralization of Special Elements used in a Command
Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint.
- 8.8 High severity
RX4-1500: Improper Neutralization of Special Elements used in a Command
Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulner
- 8.8 High severity
RX4-1500: Generation of Error Message Containing Sensitive Information
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.
- 9.8 Critical severity
RX4-1500: Use of Hard-coded Credentials
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user.
- 8.8 High severity
RX4-1500: Out-of-bounds Write
A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.