CVE-2023-41027 — Juplink RX4-1500 Credential Disclosure Vulnerability

CVE-2023-41027

Juplink RX4-1500 Credential Disclosure Vulnerability PUBLISHED

Description (CNA)

Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.

Affected (CNA)

Vendor / product	Versions
Juplink / RX4-1500	affected V1.0.5; affected V1.0.4

CWE

CWE-210

References

https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-credential-disclosure-vulnerability/

ADP enrichment

CVE

No English description supplied.

https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-credential-disclosure-vulnerability/

CISA-ADP

No English description supplied.

No references supplied.