PT-2024-12590 · Unknown · Jlink Ax1800

Published 2024-06-17 · Updated 2024-10-25 · CVE-2023-37057

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jlink AX1800 version 1.0

Description An issue in the Jlink AX1800 allows a remote attacker to execute arbitrary code via the router's authentication mechanism.

Recommendations For version 1.0, consider disabling the authentication mechanism until a patch is available. Restrict access to the router to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2023-37057

Affected Products

Jlink Ax1800

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-37057 · Security Note
• https://github.com/ri5c/Jlink-Router-RCE · Note
• http://jlink.com · Note
• https://jlink-global.com · Note
• http://unionman.com.cn/en/contact.html · Note
• https://t.me/cvenotify/83577 · Telegram Post