Back to Database
Status published
Medium
CVE-2023-41030
Juplink RX4-1500 Hard-coded Credential Vulnerability
Vulnerability Description
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-41030
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Exodus Intelligence
References
More from Juplink
View All →CVE-2023-41031
Juplink RX4-1500 homemng.htm Command Injection Vulnerability
High
8
CVE-2023-41029
Juplink RX4-1500 Command Injection Vulnerability
High
8
CVE-2023-41028
Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability
Critical
9
CVE-2023-41027
Juplink RX4-1500 Credential Disclosure Vulnerability
High
8
Affected Vendor
Juplink
View all reports →Affected Software
RX4-1500
Vulnerable Versions:
V1.0.2
Timeline
Official Publish:
September 18th, 2023
Last Modified:
September 25th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L