Victure vulnerabilities
We track 5 vulnerabilities in Victure products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 2, 2024.
Latest Victure vulnerabilities
- 8.8 High severity
rx1800_firmware: Incorrect Authorization
An issue was discovered on Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitra
- 8.8 High severity
rx1800_firmware: Incorrect Authorization
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default Wi-Fi PSK value via the last 4 octets of the BSSID.
- 8.8 High severity
rx1800_firmware: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection. Attackers can exploit this by sending crafted payloads through parameters
- 8.8 High severity
rx1800_firmware: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The /cgi-bin/luci/admin/opsw/Dual_freq_un_apple endpoint is vulnerable to command injection through the 2.4 GHz and 5 GHz name parameters, allowing a
- 8.8 High severity
rx1800_firmware: Missing Authorization
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve f