CVE-2023-41027

Summary

CVE-2023-41027 is a vulnerability affecting Juplink RX4-1500 Wifi routers running firmware versions V1.0.4 and V1.0.5. An authenticated attacker can exploit this issue by making requests to the '/webs/userpasswd.htm' endpoint, resulting in the disclosure of the administrative account password. This vulnerability poses a significant risk, as the attacker can gain unauthorized access to the router's configuration and potentially cause harm. It is crucial for users of these affected routers to apply the necessary patches as soon as possible to mitigate this credential disclosure issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.