PT-2025-20568 · Victure · Victure Rx1800

Admin · Published 2025-05-09 · Updated 2025-12-27 · CVE-2025-28202

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Victure RX1800 version EN V1.0.0 r12 110933

Description The issue is related to incorrect access control, allowing attackers to bypass authentication and enable SSH and Telnet services.

Recommendations For version EN V1.0.0 r12 110933, as a temporary workaround, consider disabling the SSH and Telnet services until a patch is available. Restrict access to these services to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-28202

Affected Products

Victure Rx1800

References · 9

• 🔥 https://pwnit.io/2025/02/13/finding-vulnerabilities-in-wi-fi-router · Exploit
• https://osv.dev/vulnerability/CVE-2025-28202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-28202 · Security Note
• https://t.me/cvedetector/24965 · Telegram Post
• https://twitter.com/cybercronai/status/1921212468656853472 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1920922883905253864 · Twitter Post
• https://twitter.com/CVEnew/status/2005031833734434940 · Twitter Post
• https://t.me/cvetracker/23491 · Telegram Post
• https://twitter.com/cybercronai/status/1921332353219137913 · Twitter Post