EUVD-2015-7208

Malware in sbrugna...

The vulnerability of Amped Wireless R10000’s microprogramming software allows a hacker to replace the response to a request.

The vulnerability of Amped Wireless R10000’s microprogramming software lies in the use of an inappropriate algorithm for selecting the ID value in DNS requests. Exploiting this vulnerability allows a remote attacker to replace the response to a request...

The vulnerability of Amped Wireless R10000’s microprogramming software allows a hacker to gain access to the authentication data of arbitrary users.

The vulnerability of Amped Wireless R10000’s microprogramming software is related to the of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users...

Amped Wireless R10000 devices with firmware credential management vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A credential management vulnerability exists in Amped Wireless R10000 devices with firmware 2.5.2.11. The device's web management interface has an administrator account, which allows remote attackers to...

Amped Wireless R10000 devices with firmware spoofing vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A security vulnerability exists in Amped Wireless R10000 devices with firmware version 2.5.2.11, which originates from the use of an incorrect algorithm to select the ID value in the header of a DNS...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7277

The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7277

Amped Wireless R10000 router (firmware 2.5.2.11) is affected by CVE-2015-7277 due to use of default admin credentials (admin:admin). A LAN-attacker can gain administrative privileges via the web management interface, enabling full control of the device. Root cause: default credentials configured ...

Amped Wireless R10000 router contains multiple vulnerabilities

Overview Amped Wireless R10000 router, firmware version 2.5.2.11, uses default credentials, is vulnerable to cross-site request forgery, and uses insufficiently random values for DNS queries. Description CWE-255: Credentials Management - CVE-2015-7277The Amped Wireless R10000 web administration...