Threats tagged 'ghsa-cx8c-x79c-m94m'

The Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon (/usr/bin/telnetd_startup) that can be triggered by a specially crafted AES-128-CBC encrypted magic packet using a static key and IV. This backdoor enables the telnet service with default credentials, granting remote root access. The vendor released firmware version 20260813_c2169ea5 which removes the UDP listener responsible for this backdoor, and users can update via the local web interface.