EUVD-2026-34968
GHSA-3c6h-v9pm-2435
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
5DescriptionCVE.org
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stack-based buffer overflow in JingDong JD Cloud Box AX6600 firmware 4.5.3.r4546 allows authenticated remote attackers to corrupt memory via the set_macfilter function in /sbin/jdcweb_rpc, potentially achieving arbitrary code execution on the router. Publicly available exploit code exists (archive hosted on cdn2.v50to.cc), increasing the likelihood of opportunistic abuse against exposed devices. The vendor did not respond to coordinated disclosure, so no fix is currently confirmed.
Technical ContextAI
The vulnerable component is jdcweb_rpc, an RPC daemon in the AX6600 Wi-Fi 6 router's management plane that exposes router configuration handlers including MAC filtering. The set_macfilter handler processes attacker-controlled input and copies it into a fixed-size stack buffer without adequate length validation, matching CWE-121 (Stack-based Buffer Overflow). On embedded MIPS/ARM SOHO routers like the AX6600, overflowing a stack frame typically allows overwriting the saved return address or function pointers, and these devices commonly ship without modern mitigations such as stack canaries, ASLR, or NX, making reliable control-flow hijack practical. The CPE cpe:2.3:a:jingdong:jd_cloud_box_ax6600 indicates the issue lives in the router's vendor-specific firmware stack rather than an upstream OpenWrt component.
RemediationAI
No vendor-released patch identified at time of analysis - JingDong did not respond to the coordinated disclosure attempt, so operators must rely on compensating controls. Restrict access to the router's management/RPC interface to trusted LAN segments only and ensure the WAN-side administration interface is disabled, since exploitation requires reaching the jdcweb_rpc service. Replace any default or weak administrative credentials immediately because the CVSS PR:L requirement means an attacker with low-privilege access can fully compromise the device; enforce strong, unique passwords and disable guest/low-privilege accounts where possible. If the MAC filtering feature is non-essential, avoid using it to reduce the attack surface around set_macfilter, accepting the trade-off of losing that access control. Monitor the VulDB entry (https://vuldb.com/vuln/368970) for any future vendor firmware update and consider replacement of the device if JingDong remains unresponsive, since unpatched SOHO routers accumulate risk over time.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today