Threats tagged 'ghsa-8733-m6xw-p22m'

The Rooxis RXR-12 Wi-Fi router contains an undocumented backdoor account with UID 0 named 'dg' that uses a firmware-wide default password 'ivanlee'. This account provides root-level access via SSH or local console without requiring device-specific credentials. A firmware update (20260813_c2169ea5) removes this backdoor account and disables root password authentication over SSH. Users can apply this fix through the router's local web interface.