Back to overview

CVE-2026-10045

CRITICAL Exploitation: PoC
9.8
CVSS 3.1
Description
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash, inspect active connections, and view currently connected devices.

Metadata

CVE ID
CVE-2026-10045
State
PUBLISHED
Assigner
certcc
Reserved
2026-05-28 21:12 UTC
Published
2026-06-09 18:09 UTC
Last updated
2026-06-09 19:09 UTC
Vendor / Product
Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd / DR300
Sources
cve.org  ·  NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
PoC
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd DR300 — 2.1.2.121
Weakness (CWE)
CWESourceDescription
— cna CWE-798 Use of Hard-coded Credentials
— cna CWE-319 Cleartext Transmission of Sensitive Information
— cna CWE-1188 Insecure Default Initialization of Resource
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.8 CRITICAL 3.1 adp CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References (1)
Back to overview