CVE-2023-41027

HIGH Year: 2023
CVSS v3 Score
8.8
High
CVSS v2 Score
7.7
High
Weakness Type
CWE-210
View all →

Vulnerability Description

Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.

Related Vulnerabilities

CVE-2021-40126

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure. This vulnerabilit...

CWE-2102021