EUVD-2026-34968
GHSA-3c6h-v9pm-2435
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
5DescriptionCVE.org
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stack-based buffer overflow in JingDong JD Cloud Box AX6600 firmware 4.5.3.r4546 allows authenticated remote attackers to corrupt memory via the set_macfilter function in /sbin/jdcweb_rpc, potentially achieving arbitrary code execution on the router. Publicly available exploit code exists (archive hosted on cdn2.v50to.cc), increasing the likelihood of opportunistic abuse against exposed devices. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must be able to reach the jdcweb_rpc RPC service on the JD Cloud Box AX6600 running firmware 4.5.3.r4546 and must hold at least low-privilege credentials to invoke the set_macfilter function (CVSS PR:L), which in practice means authenticated access to the router's management interface. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 4.0 scores this 7.4 (High) with AV:N/AC:L/AT:N/PR:L/UI:N and high confidentiality, integrity, and availability impact, indicating low-complexity network exploitation that requires some level of authentication (PR:L) and yields full device compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has obtained low-privilege access to the router's RPC interface - for example via a weak admin password, an exposed management port, or LAN foothold from a compromised client - sends a crafted RPC request to the set_macfilter handler with an oversized argument that overflows its stack buffer. Using the publicly distributed exploit archive (JDcloud-AX6600_overflow.zip), the attacker overwrites the saved return address to redirect execution to shellcode, gaining code execution in the context of jdcweb_rpc and enabling persistent traffic interception, DNS hijacking, or pivot into the internal network. |
| Remediation | No vendor-released patch identified at time of analysis - JingDong did not respond to the coordinated disclosure attempt, so operators must rely on compensating controls. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify and inventory all JingDong JD Cloud Box AX6600 routers running firmware 4.5.3.r4546 or earlier; isolate vulnerable units from production networks or restrict management interface access. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today