Vulnerabilities

TI-2025-20747 CVE-2025-28203 · GHSA-3m4v-8v7m-fjqh

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.

MEDIUM 42

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00886 Published 2025-05-09 No fix listed CWE-94

TI-2025-20746 CVE-2025-28202 · GHSA-crgq-r5hp-5v47

MEDIUM 41

Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services without authentication.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00558 Published 2025-05-09 No fix listed CWE-862

TI-2025-20745 CVE-2025-28201 · GHSA-4hrx-7c6v-v9v5

LOW 32

An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain root access.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0044 Published 2025-05-09 No fix listed CWE-284

TI-2025-20744 CVE-2025-28200 · GHSA-x3g7-56f2-8w33

HIGH 82

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2025-05-09 No fix listed CWE-521