CVE-2021-27403

未认证的跨站脚本 – Askey互联网光纤调制解调器 厂商：Askey 软件版本：BRSVg11.11RTFTEF001V6.54V014 型号：RTF8115VW 漏洞参数：curWebPage Payload：";alert'xss'// 未在其他型号/版本中测试。 通过GET请求 在登录请求中，我们可以发起一个GET请求： http://x.x.x.x/cgi-bin/teaccesorouter.cgi?curWebPage=/settings-internet.asp";alert'xss'//&loginUsername=admin&loginPassword=admin...

CVE-2021-27404

已认证的主机头注入 - Askey互联网光纤调制解调器 供应商：Askey 软件版本：BRSVg11.11RTFTEF001V6.54V014 型号：RTF8115VW 易受攻击的头部：Host 未在其他型号/版本中测试。 影响：攻击者可以利用该漏洞将用户重定向到伪造的登录页面，以提取其凭据或cookie。 最终请求 GET / HTTP/1.1 Host: kay4tb35bh55y38n8h4teim21t7jv8.burpcollaborator.net Cookie: httpdSessionId=7924107467ea5838a196b65306ca7236...

CVE-2021-27403

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

CVE-2021-27404

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...

EUVD-2021-14159

Malware in sbrugna...

Askey RTF8115VW 操作系统命令注入漏洞

Askey is the world's first professional manufacturer of international network communication equipments, the main products are ADSL, Cable, Modem, ADSL Router, Cable Router and so on. The main products are ADSL, Cable Modem, ADSL Router, Cable Router and so on. The Askey Fiber Optic Router...

CVE-2021-27403

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

CVE-2021-27403

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

CVE-2021-27404

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...

Design/Logic Flaw

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...

Cross site scripting

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

CVE-2021-27403

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

CVE-2021-27403

CVE-2021-27403 affects Asus Askey routers: specifically the RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 family. The vulnerability is a cross-site scripting (XSS) in the web interface, exposed via cgi-bin/te_acceso_router.cgi with curWebPage context. Public descriptions consistently state that th...

CVE-2021-27404

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...

CVE-2021-27404

CVE-2021-27404 affects Askey RTF8115VW devices (BR_SV_g11.11_RTF_TEF001_V6.54_V014). The vulnerability enables injection of a Host HTTP header due to an improper handling of HTTP headers on the device. Public references in connected documents confirm the affected product/firmware naming, but the ...

CVE-2021-27403: Improper Neutralization of Input During Web Page Generation

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...

PT-2021-17443

Name of the Vulnerable Software and Affected Versions Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014 Description The issue allows injection of a Host HTTP header. Recommendations For Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014, at the moment, there is no information about a newer versi...

PT-2021-17442

Name of the Vulnerable Software and Affected Versions Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014 Description The issue concerns a XSS vulnerability in the "cgi-bin/te acceso router.cgi" endpoint, specifically with the curWebPage parameter. This allows for potential exploitation...

CVE-2021-27404: URL Redirection to Untrusted Site

Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...

Askey RTF8115VW Cross-Site Scripting Vulnerability

Askey RTF8115VW is an application from Askey China. Provides the most stable broadband connection source to bring super-fast speeds to all types of users. A cross-site scripting vulnerability exists in Askey RTF8115VW. The vulnerability stems from cgi-bin/teaccesorouter.cgi curWebPage missing...