Vulnerability Details CVE-2020-8798
httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.1%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
Products affected by CVE-2020-8798
-
cpe:2.3:h:juplink:rx4-1500:-
-
cpe:2.3:o:juplink:rx4-1500_firmware:1.0.3
-
cpe:2.3:o:juplink:rx4-1500_firmware:1.0.4
-
cpe:2.3:o:juplink:rx4-1500_firmware:1.0.5