119 matches found
CVE-2021-27404
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
CVE-2021-27404
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
CVE-2021-27403
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...
Design/Logic Flaw
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
CVE-2021-27404
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
CVE-2021-27403
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...
Cross site scripting
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...
CVE-2021-27403
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...
CVE-2021-27403
CVE-2021-27403 affects Asus Askey routers: specifically the RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 family. The vulnerability is a cross-site scripting (XSS) in the web interface, exposed via cgi-bin/te_acceso_router.cgi with curWebPage context. Public descriptions consistently state that th...
CVE-2021-27404
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
CVE-2021-27404
CVE-2021-27404 affects Askey RTF8115VW devices (BR_SV_g11.11_RTF_TEF001_V6.54_V014). The vulnerability enables injection of a Host HTTP header due to an improper handling of HTTP headers on the device. Public references in connected documents confirm the affected product/firmware naming, but the ...
PT-2021-17442
Name of the Vulnerable Software and Affected Versions Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014 Description The issue concerns a XSS vulnerability in the "cgi-bin/te acceso router.cgi" endpoint, specifically with the curWebPage parameter. This allows for potential exploitation...
PT-2021-17443
Name of the Vulnerable Software and Affected Versions Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014 Description The issue allows injection of a Host HTTP header. Recommendations For Askey RTF8115VW BR SV g11.11 RTF TEF001 V6.54 V014, at the moment, there is no information about a newer versi...
CVE-2021-27404: URL Redirection to Untrusted Site
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow injection of a Host HTTP header...
CVE-2021-27403: Improper Neutralization of Input During Web Page Generation
Askey RTF8115VW BRSVg11.11RTFTEF001V6.54V014 devices allow cgi-bin/teaccesorouter.cgi curWebPage XSS...
Fastweb Askey RTV1907VW Input Validation Error Vulnerability
The Fastweb Askey RTV1907VW is a router from Fastweb Italy. An input validation error vulnerability exists in the Askey RTF8115VW. The vulnerability stems from an allowed injection in the Host HTTP header of a web service. The following products and versions are affected: Askey RTF8115VW...
Askey RTF8115VW Cross-Site Scripting Vulnerability
Askey RTF8115VW is an application from Askey China. Provides the most stable broadband connection source to bring super-fast speeds to all types of users. A cross-site scripting vulnerability exists in Askey RTF8115VW. The vulnerability stems from cgi-bin/teaccesorouter.cgi curWebPage missing...
CVE-2020-15357
Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...
CVE-2020-15357
Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...
CVE-2020-15023
Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...