Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Juplink RX4-1500 homemng.htm Command Injection Vulnerability
Vulnerability Description
Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Juplink RX4-1500 命令注入漏洞
Vulnerability Description
Juplink RX4-1500是Juplink公司的一款无线路由器。 Juplink RX4-1500 Wifi router存在安全漏洞,该漏洞源于homemng.htm端点存在命令注入漏洞。攻击者可利用该漏洞发送特制请求执行任意命令。受影响的产品和版本:Juplink RX4-1500 Wifi router firmware 1.0.2版本,1.0.3版本,1.0.4版本,1.0.5版本。
CVSS Information
N/A
Vulnerability Type
N/A