66 matches found
Authentication flaw
TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2018-7034
TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2018-7034
TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2018-7034
CVE-2018-7034 impacts TRENDnet TEW-751DR (v1.03B03), TEW-752DRU (v1.03B01) and TEW733GR (v1.03B01). The vulnerability is an authentication bypass via AUTHORIZED_GROUP=1 in requests to getcfg.php, enabling access to sensitive information. Several connected sources corroborate that this is a router...
CVE-2018-7034: Improper Authentication
TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
D-Link DIR-645 getcfg.php Admin Password Disclosure
The remote D-Link DIR-645 router is affected by an information disclosure vulnerability. By sending a specially crafted request to the 'getcfg.php' script, a remote unauthenticated attacker could retrieve the admin password information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...