Threats tagged 'ghsa-564w-8r32-j88f'

The Rooxis RXR-12 Wi-Fi router has an unauthenticated remote code execution vulnerability in the /usr/bin/cloud_manage component. This flaw allows an attacker positioned on the network path with access to a hard-coded cloud endpoint to execute arbitrary commands as root via a specially crafted JSON diagnoseParameter field sent over cleartext HTTP. The issue is fixed in firmware version 20260813_c2169ea5, which can be installed through the router's local web interface.