CVE-2023-41029

8.8 highEPSS 2.7%

High (8.8) in juplink rx4-1500 firmware. EPSS 2.7% chance of exploitation in the next 30 days.

Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2023-09-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

juplink:rx4-1500_firmware

References

https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-command-injection-vulnerability/
https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-command-injection-vulnerability/

Check your stack JSON