ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
Description
ProSoft RLX-IFH24E version 2.2.44 contains a vulnerability where an unsigned firmware upgrade package is executed with root privileges.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The ProSoft RLX-IFH24E device running version 2.2.44 is vulnerable because it executes firmware upgrade packages without verifying their signature, allowing unsigned packages to run with root-level permissions. This behavior can lead to unauthorized code execution at the highest privilege level on the device.
Potential Impact
An attacker able to deliver a malicious unsigned firmware upgrade package could execute arbitrary code as root, potentially compromising the device's integrity and control. This could lead to unauthorized system modifications or persistent compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to firmware upgrade functionality and verify firmware sources manually if possible.
Technical Details
- Edb Id
- 52693
- Has Exploit Code
- true
- Code Language
- perl
Indicators of Compromise
Exploit Source Code
Exploit code for ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
Title: ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root Author: 0day Rubbish Research Team Contact: [email protected] Type: remote Platform: Hardware Advisory: https://0day-rubbish.com/blog/prosoft-rlx-ifh24e-unsigned-upgrade-package-root-rce CVE: pending Description: ProSoft RLX-IFH24E, version v2.2.44, the industrial wireless radio from ProSoft Technology, Inc. (United States) whose research designation is RLX-IH 24E, installs and executes code submitt... (19344 more characters)
Threat ID: 6ad923204d27ba8daafe2104
Added to database: 10/21/2026, 20:40:00 UTC
Last enriched: 10/21/2026, 20:40:35 UTC
Last updated: 10/21/2026, 20:40:35 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.