5 matches found
CVE-2020-15636
The CVE-2020-15636 vulnerability affects NETGEAR routers: R6400, R6700, R7000, R7850, R7900, R8000, RS400, XR300 with firmware 1.0.4.84_10.0.58. The issue resides in the check_ra service, where a crafted raePolicyVersion in RAE_Policy.json can overflow a fixed-length stack-based buffer, allowing ...
CVE-2017-15636
CVE-2017-15636 affects TP-Link WVR, WAR and ER devices. It allows remote authenticated administrators to execute arbitrary commands via a command injection in the new-time variable in the webfilter.lua file. The provided metrics indicate a high impact (C/H/I/A) with network access and no user int...
TP-Link Remote Command Injection
Introduction: ================ The WVR-, WAR- and ER- products are the SOHO/WIFI routers of TP-Link. These issues allow remote authenticated administrators to execute arbitrary commands via command injection through different variables of different lua files. If the attacker obtains the account a...
