EUVD-2015-7208

Malware in sbrugna...

The vulnerability of Amped Wireless R10000’s microprogramming software allows a hacker to gain access to the authentication data of arbitrary users.

The vulnerability of Amped Wireless R10000’s microprogramming software is related to the of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users...

The vulnerability of Amped Wireless R10000’s microprogramming software allows a hacker to replace the response to a request.

The vulnerability of Amped Wireless R10000’s microprogramming software lies in the use of an inappropriate algorithm for selecting the ID value in DNS requests. Exploiting this vulnerability allows a remote attacker to replace the response to a request...

Amped Wireless R10000 devices with firmware credential management vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A credential management vulnerability exists in Amped Wireless R10000 devices with firmware 2.5.2.11. The device's web management interface has an administrator account, which allows remote attackers to...

Amped Wireless R10000 devices with firmware spoofing vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A security vulnerability exists in Amped Wireless R10000 devices with firmware version 2.5.2.11, which originates from the use of an incorrect algorithm to select the ID value in the header of a DNS...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7277

The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7277

Amped Wireless R10000 router (firmware 2.5.2.11) is affected by CVE-2015-7277 due to use of default admin credentials (admin:admin). A LAN-attacker can gain administrative privileges via the web management interface, enabling full control of the device. Root cause: default credentials configured ...

PT-2015-7497

Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11 Description The web administration interface has a default password of admin for the admin account, allowing remote attackers to obtain administrative privileges by leveraging a LAN session. Recommendatio...

PT-2015-3208

Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This can enable an attacker to access...

PT-2015-3207

Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11 Description The issue is related to the use of an improper algorithm for selecting the ID value in the header of a DNS query. This makes it easier for remote attackers to spoof responses by predicting thi...

CVE-2015-7278: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7277: Undefined Security Weakness

The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7279: Undefined Security Weakness

Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...

Amped Wireless R10000 router contains multiple vulnerabilities

Overview Amped Wireless R10000 router, firmware version 2.5.2.11, uses default credentials, is vulnerable to cross-site request forgery, and uses insufficiently random values for DNS queries. Description CWE-255: Credentials Management - CVE-2015-7277The Amped Wireless R10000 web administration...