by Kastro
Paper/Archive/CVE-2023-41028

CVE-2023-41028

Juplink RX4-1500 — Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability

EPSS 0.9%CVSS 9.0
critical.is priorityof 100
39
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 58.5.585 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.

Affected

ProductAffectedFixed inSource
RX4-1500V1.0.2 – V1.0.5–CNA
rx4-15001.0.2 – 1.0.5–CISA-ADP

Scores by source

XI (CNA)9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refblog.exodusintel.com/2023/08/23/juplink-rx4-1500-stack-based-buffer-overflow-vulnerability