PT-2020-20287
CVE-2020-8798
·
Published
2020-04-23
·
Updated
2020-05-06
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Juplink RX4-1500 versions 1.0.3 through 1.0.5
Description
The issue allows remote attackers to change or access router settings by connecting to the unauthenticated "setup3.htm" endpoint from the local network.
Recommendations
For versions 1.0.3 through 1.0.5, as a temporary workaround, consider restricting access to the "setup3.htm" endpoint until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾