241 matches found
CVE-2015-7794
Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...
CVE-2015-7793
Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...
Design/Logic Flaw
Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...
Code injection
Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...
Design/Logic Flaw
Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...
CVE-2015-7793
Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...
CVE-2015-7794
Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...
CVE-2015-7792
CVE-2015-7792 affects Corega CG-WLBARGS wireless LAN routers. The vulnerability arises from CG-WLBARGS not properly performing authentication, enabling an attacker who can access the device to log in with administrative privileges and perform arbitrary administrative operations. The issue is mapp...
CVE-2015-7794
CVE-2015-7794 affects Corega CG-WLNCM4G devices that may act as an open DNS resolver. This condition enables an unauthenticated remote attacker to weaponize the device for a DNS amplification attack, contributing to a DDoS scenario. Documented impact describes a denial of service via crafted quer...
CVE-2015-7793
CVE-2015-7793 affects Corega CG-WLBARAGM wireless routers. The issue is that the device may behave as an open proxy, enabling remote attackers to trigger outbound network traffic via unspecified vectors. Documents from JVN/NVD/NVD-linked records confirm the affected product and open-proxy behavio...
CVE-2015-7792
Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...
Corega CG-WLNCM4G devices denial of service vulnerability
Corega CG-WLNCM4G is a network camera offered by Corega. A denial of service vulnerability exists in Corega CG-WLNCM4G devices. It allows remote attackers to cause a denial of service attack by leveraging unspecified vectors...
CG-WLBARAGM may behave as an open proxy
Overview CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Akihiro Nakajima of NTT Communications reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#51349622: CG-WLBARGS does not properly perform authentication
CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Impact An attacker who can access the product may log in with administrative privileges. As a result, an arbitrary administrative operations may be executed. Solution Apply a Workaroun...
JVN#50775659: CG-WLBARAGM may behave as an open proxy
CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Impact The device may be leveraged as a proxy server to conduct cyber attacks. Solution Apply a Workaround The following workaround may mitigate the affects of this...
JVN#51250073: CG-WLNCM4G may behave as an open resolver
CG-WLNCM4G provided by Corega Inc is a network camera. CG-WLNCM4G contains an issue where it may behave as an open resolver. Impact The device may be leveraged for use in a DNS amplification attack and unknowingly become a part of a DDoS attack. Solution Do not use CG-WLNCM4G As of December 25,...
CVE-2015-6362
CVE-2015-6362 affects Cisco Connected Grid Network Management System (CG-NMS) web GUI in versions 3.0(0.35) and 3.0(0.54). The issue arises from insufficient authorization controls, allowing remote authenticated users in the Monitor-Only role to bypass restrictions and modify configuration. The r...
CVE-2014-0762
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...