Priority MEDIUM 42
Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00886 · Published 2025-05-09 · No fix listed CWE-94
Priority MEDIUM 41
Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services without authentication.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00558 · Published 2025-05-09 · No fix listed CWE-862
Priority LOW 32
An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain root access.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0044 · Published 2025-05-09 · No fix listed CWE-284
Priority HIGH 82
Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0065 · Published 2025-05-09 · No fix listed CWE-521
Priority LOW 39
Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00164 · Published 2024-09-18 · No fix listed CWE-798
Priority LOW 29
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0035 · Published 2024-09-18 · No fix listed CWE-798
Priority MEDIUM 40
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00398 · Published 2024-09-18 · No fix listed CWE-256
Priority LOW 34
An issue was discovered on Victure WR1200 devices through 1.0.3.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2021-11-30 · No fix listed CWE-798
Priority MEDIUM 45
An issue was discovered on Victure WR1200 devices through 1.0.3.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04566 · Published 2021-11-30 · No fix listed CWE-78
Priority LOW 30
An issue was discovered on Victure WR1200 devices through 1.0.3.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0063 · Published 2021-11-30 · No fix listed CWE-798
Priority MEDIUM 45
Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01412 · Published 2021-08-30 · No fix listed CWE-121
Priority MEDIUM 46
Victure PC530 devices allow unauthenticated TELNET access as root.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02067 · Published 2019-10-01 · No fix listed CWE-306
THREATIST.IORead the docs