Skip to content
Sign in Sign up
JA EN FR
SecPulse
A detailed explainer is available in Japanese. Read the Japanese explainer
Critical 10.0

VW2100/VEC10GPで認証なしにコマンド実行、修正版なし

CVE-2026-124580 First seen on SecPulse

Summary

Chengdu Feiyuxing TechnologyのルーターVW2100とVEC10GPに、認証なしでroot権限のコマンドを実行される脆弱性が見つかり、攻撃コードも公開されています。修正版はないため、管理画面を外部から届かない状態にし、入れ替えも検討してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

Chengdu Feiyuxing TechnologyのルーターVW2100とVEC10GPに、認証なしでroot権限のコマンドを実行される脆弱性が見つかり、攻撃コードも公開されています。修正版はないため、管理画面を外部から届かない状態にし、入れ替えも検討してください。

Original description The description as published by the source.

A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details