603 matches found
CVE-2020-28093: Undefined Security Weakness
On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...
PT-2020-16924
Name of the Vulnerable Software and Affected Versions Tenda AC1200 Model AC6 version 15.03.06.51 multi Description The issue concerns devices with default passwords for admin, support, user, and nobody accounts, which are all set to 1234. Recommendations For Tenda AC1200 Model AC6 version...
PT-2020-16925
Name of the Vulnerable Software and Affected Versions Tenda AC1200 Model AC6 version 15.03.06.51 multi Description The default settings for the router speed test on the affected device contain links to download malware named elive or CNKI E-Learning. Recommendations For Tenda AC1200 Model AC6...
Binary Vulnerability in ASUS RT-AC5300, RT-AC1200
ASUS was established in June 2000, business scope: research and development, manufacturing of notebook computers, computer motherboards, medium-sized mainframe computers, high-end personal computers, servers and so on. A binary vulnerability exists in ASUS RT-AC5300, RT-AC1200, which can be...
CVE-2019-17137
CVE-2019-17137 affects NETGEAR AC1200 R6220 Smart WiFi Router (firmware 1.1.0.86). The root cause is in the processing of path strings: inserting a null byte can bypass most authentication checks, enabling network-adjacent attackers to bypass authentication. Documented exploit details come from Z...
CVE-2019-17137: Null Byte Interaction Error (Poison Null Byte)
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings...
(0Day) NETGEAR AC1200 mini_httpd Cleartext Transmission of Sensitive Information Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR AC1200 Smart WiFi Router. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of admin credentials provided to the...
(0Day) NETGEAR AC1200 mini_httpd Password Storage Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on vulnerable installations of NETGEAR AC1200 Smart WiFi Router. Authentication is required to exploit this vulnerability. The specific flaw exists within the storage of administrator credentials. The credentia...
CVE-2019-5072
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...
CVE-2019-5071
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...
CVE-2019-5072
The CVE-2019-5072 entry maps to a Tenda AC9 router vulnerability in /goform/WanParameterSetting that enables a local authenticated command-injection leading to code execution (root shell possible) via DNS2 post parameters. Talos reports CVSS 3.0/7.8 and confirms affected versions AC9V1.0 firmware...
PT-2019-17454
Name of the Vulnerable Software and Affected Versions Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route version AC9V1.0 Firmware V15.03.05.16multiTRU Description An exploitable command injection issue exists in the /goform/WanParameterSetting functionality. A specially crafted HTTP POST...
PT-2019-17453
Name of the Vulnerable Software and Affected Versions Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route version AC9V1.0 Firmware V15.03.05.16multiTRU Description A command injection issue exists in the /goform/WanParameterSetting functionality. This can be triggered by a specially crafte...
CVE-2019-5072: Improper Neutralization of Special Elements used in an OS Command
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...
NETGEAR AC1200 mini_httpd Poison Null Byte Authentication Bypass Vulnerability
The NETGEAR AC1200 is a wireless router from NETGEAR. A security vulnerability exists in the path string handling process in the NETGEAR AC1200. An attacker could exploit the vulnerability to bypass authentication on the system...
PT-2019-14968
Name of the Vulnerable Software and Affected Versions NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Description This issue allows network-adjacent attackers to bypass authentication on affected installations. The flaw exists within the processing of path strings, specifically by inserting a null...
NETGEAR AC1200 mini_httpd Poison Null Byte Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings. By inserting a null byte into...
CVE-2017-11345
Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RTAC1200GU,...
Google WiFi Router — Combine Multiple Routers to Boost WiFi Signal
Can you rely on a single loudspeaker in your living room for great sound throughout your home? Nah! In the same way, you can not expect a single WiFi router to provide stable range throughout your home. To solve this issue, Google will soon power your home's wireless internet network with its...
