CVE-2020-8797

PoC —

CVSS 3.1

6.7 medium

EPSS

<1%p59

Published

Apr 23, 2020 (Apr 23, 2020)

Modified

Jun 17, 2026

Description

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled and the attacker can authenticate as admin from the local network.

Vendors: juplink
Products: rx4-1500 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.