CVE-2024-53937: High severity victure rx1800 vulnerability
An issue was discovered on Victure RX1800 WiFi 6 Router (software ENV1.0.0r12110933, hardware 1.0) devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions. Device setup does not require this password to be changed during setup in order to utilize the device. (However, the TELNET password is dictated by the current GUI password.)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53937?
CVE-2024-53937 is considered a critical vulnerability due to the potential for unauthorized command execution on the affected router.
How do I fix CVE-2024-53937?
To fix CVE-2024-53937, disable the TELNET service and change the default admin password immediately.
What devices are affected by CVE-2024-53937?
CVE-2024-53937 affects Victure RX1800 WiFi 6 Router devices running software version EN_V1.0.0_r12_110933.
What risks are associated with CVE-2024-53937?
The risks associated with CVE-2024-53937 include potential unauthorized access and control of the router by attackers.
Can CVE-2024-53937 be exploited remotely?
CVE-2024-53937 can be exploited locally over the LAN network due to the exposure of the TELNET service.