CVE-2026-10045
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Shenzhen Kangda Xin Intelligent Network Technology's router DR300 (version 2.1.2.121) contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. This allows attackers to read/write memory, modify firmware, inspect active connections, and view connected devices.
Risk Assessment
An attacker could fully compromise the router, leading to network traffic interception and security breach of the entire network.
Recommendation
Change default credentials and disable telnet on the DR300 router. If possible, update the firmware.
Original NVD description (English source)
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash, inspect active connections, and view currently connected devices.