CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

CVE-2021-31152

CVE-2021-31152 affects Multilaser Router AC1200 V02.03.01.45_pt. The issue is a cross-site request forgery (CSRF) vulnerability in the router’s web interface that can enable remote access and allow changes to passwords and other settings via misconfigured requests/headers. Exploit examples (RE018...

Multilaser Router AC1200 跨站请求伪造漏洞

The Multilaser Router AC1200 is a router from Multilaser. The Multilaser Router AC1200 V02.03.01.45pt suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to enable remote access, change passwords, and perform other actions via misconfigured requests,...

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

Cross site scripting

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

Tenda AC5 AC1200 Wireless Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

CVE-2021-3186

CVE-2021-3186 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Tenda AC5 AC1200 router, specifically in the /main.html Wifi Settings page where the Wifi Name parameter can be exploited to inject arbitrary script/HTML. Affected firmware version is V15.03.06.47_multi. Public refer...

PT-2021-19554 · Tenda · Tenda Ac5 Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC5 AC1200 version V15.03.06.47 multi Description: A Stored Cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter in the Wifi Settings, specifically in the...

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

Design/Logic Flaw

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

CVE-2020-28095

The CVE-2020-28095 entry applies to Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The vulnerability is triggered by sending a large HTTP POST to the change password API, causing the router to crash and enter an infinite boot loop. Documents confirm this affects the Change Password API...

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

PT-2020-16926 · Tenda · Tenda Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Model AC6 version 15.03.06.51 multi Description: A large HTTP POST request sent to the "change password API" will trigger the router to crash and enter an infinite boot loop. Recommendations: For Tenda AC1200 Model AC6 version...

Unspecified Vulnerability in Tenda AC1200

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC1200 Model AC6 15.03.06.51multi devices, which originates from the default router speed test settings containing a malware download link named live or CNKI E-Learning. No details of th...

Tenda AC1200 Default Credentials Disclosure Vulnerability

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A default credential disclosure vulnerability exists in the Tenda AC1200 Model AC6 15.03.06.51multi, which stems from the fact that admin, support, user, and nobody has a default password of 1234, which can be exploited by an...