CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

CVE-2021-44259

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

Design/Logic Flaw

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

Authentication flaw

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

CVE-2021-44259

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

CVE-2021-44259

CVE-2021-44259 concerns WAVLINK AC1200 (WAVLINK-A42W-1.27.6-20180418): unauthenticated access to the wx.html page allows an unauthenticated attacker to access the page and connect to the device as a friend of the owner. The vulnerability is triggered through direct access to this page without cre...

CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

CVE-2021-44260

WAVLINK AC1200 (model WAVLINK-A42W, firmware 1.27.6-20180418) is vulnerable via the live_mfg.html page. The issue allows remote, unauthenticated access to this page, exposing sensitive information about the router manager. The CVE is CVE-2021-44260. Technical details across sources confirm an inf...

PT-2022-12032

Name of the Vulnerable Software and Affected Versions WAVLINK AC1200 version WAVLINK-A42W-1.27.6-20180418 Description A vulnerability exists in the 'wx.html' page, allowing a remote attacker to access this page without authentication. When an unauthorized user accesses this page directly, it...

PT-2022-12033

Name of the Vulnerable Software and Affected Versions WAVLINK AC1200 version WAVLINK-A42W-1.27.6-20180418 Description A vulnerability in the 'live mfg.html' page allows a remote attacker to access this page without authentication, exposing key information of the router manager. Recommendations Fo...

WAVLINK AC1200 访问控制错误漏洞

WAVLINK AC1200 is a dual-band high power wireless router from China RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 version, which stems from a lack of protection and restriction of privileges for sensitive information in livemfg.html...

WAVLINK AC1200 访问控制错误漏洞

WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...

CVE-2021-44260: Missing Authentication for Critical Function

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

CVE-2021-44259: Missing Authentication for Critical Function

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner...

PT-2022-12342

Name of the Vulnerable Software and Affected Versions Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49 multi Description A Command injection issue exists via the setUsbUnload functionality. The issue is caused because the client-controlled deviceName value is...

Tenda AC-10U AC1200 Router Denial of Service (CVE-2020-22079)

A denial-of-service vulnerability exists in Tenda AC-10U AC1200 Router. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2020-22079: Out-of-bounds Write

Stack-based buffer overflow in Tenda AC-10U AC1200 Router USAC10UV1.0RTLV15.03.06.48multiTDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg...

TOTOLINK A3002R Cross-Site Scripting Vulnerability (CNVD-2021-64485)

TOTOLINK A3002RU is an AC1200 wireless dual-band gigabit router. ddns.htm in TOTOLINK A3002R version 1.1.1-B20200824 is vulnerable to cross-site scripting. An attacker can modify the "domain" field, "server address" field, "username/email" or "password/key " field to execute arbitrary JavaScript...

TOTOLINK A3002R Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is an AC1200 wireless dual-band gigabit router. tcpipwan.htm in TOTOLINK A3002R version 1.1.1-B20200824 is vulnerable to cross-site scripting. The vulnerability can be exploited to execute arbitrary JavaScript by modifying the "service name" field...

Tenda AC1200 Denial Of Service (CVE-2020-28095)

A denial of service vulnerability exists in Tenda AC1200. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...