PT-2024-35979 · Victure · Victure Rx1800 Wifi 6 Router

Edward Warren · Published 2024-12-02 · Updated 2024-12-03 · CVE-2024-53937

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Victure RX1800 WiFi 6 Router version EN V1.0.0 r12 110933

Description: A problem was discovered in Victure RX1800 WiFi 6 Router devices where the TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. This allows attackers to execute arbitrary commands with root-level permissions. The device setup does not require this password to be changed during setup in order to utilize the device. However, the TELNET password is dictated by the current GUI password.

Recommendations: To resolve the issue, change the default TELNET password to a strong and unique password. As a temporary workaround, consider disabling the TELNET service until a patch is available. Additionally, ensure that the GUI password is also changed to a strong and unique password, as it dictates the TELNET password.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-53937

Affected Products

Victure Rx1800 Wifi 6 Router

References · 6

• 🔥 https://github.com/actuator/cve/blob/main/Victure/Victure_RX1800_Security_Report.pdf · Exploit
• 🔥 https://github.com/actuator/cve/blob/main/Victure/CVE-2024-53937.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-53937 · Security Note
• https://twitter.com/CVEnew/status/1863717361217417468 · Twitter Post
• https://t.me/cvenotify/102861 · Telegram Post
• https://t.me/cvedetector/11843 · Telegram Post