An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection. Attackers can exploit this by sending crafted payloads through parameters intended for the ping utility, enabling arbitrary command execution with root-level permissions on the device.
References
Configurations
No configuration.
History
15 Apr 2026, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Se descubrió un problema en los dispositivos Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0). Algunos endpoints /cgi-bin/luci/admin son vulnerables a la inyección de comandos. Los atacantes pueden aprovechar esto enviando payloads manipulados a través de parámetros destinados a la utilidad ping, lo que permite la ejecución arbitraria de comandos con permisos de nivel superusuario en el dispositivo. |
03 Dec 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-78 |
02 Dec 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-02 22:15
Updated : 2026-04-15 00:35
NVD link : CVE-2024-53940
Mitre link : CVE-2024-53940
CVE.ORG link : CVE-2024-53940
JSON object : View
Products Affected
No product.
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')