311 matches found
PT-2017-9361
Name of the Vulnerable Software and Affected Versions Corega CG-WLR300NX firmware versions 1.20 and earlier Description A cross-site scripting issue allows an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Corega CG-WLR300NX...
PT-2017-9359
Name of the Vulnerable Software and Affected Versions Corega CG-WLBARGMH affected versions not specified Corega CG-WLBARGNL affected versions not specified Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Corega...
CVE-2016-7808: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-9360
Name of the Vulnerable Software and Affected Versions Corega CG-WLR300NX firmware versions 1.20 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of logged-in users, enabling them to conduct unintended operations. The exact vectors use...
CVE-2016-7810: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-9362
Name of the Vulnerable Software and Affected Versions Corega CG-WLR300NX firmware version 1.20 and earlier Description The issue allows an attacker on the same network segment to bypass access restrictions and perform arbitrary operations. Recommendations For Corega CG-WLR300NX firmware version...
CVE-2016-7811: Improper Access Control
Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...
CVE-2016-7809: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...
CG-WLR300NX fails to restrict access permissions
Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX fails to restrict access permissions. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
CG-WLR300NX vulnerable to cross-site request forgery
Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
JVN#23549283: CG-WLR300NX fails to restrict access permissions
CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX fails to restrict access permissions. Impact An attacker who can access the product may perform an arbitrary operation in the product while an administrator logs in. Solution Update the Firmware Update to the latest version ...
JVN#92237169: CG-WLR300NX vulnerable to cross-site scripting
CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Firmware Update to the latest version of firmware according to the information...
JVN#25060672: Multiple Corega wireless LAN routers vulnerable to cross-site scripting
Multiple Corega wireless LAN routers contain a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Use CG-WLR300NX or CG-WFR600 CG-WLBARGMH and CG-WLBARGNL are no longer being supported, therefore fix for this vulnerability wil...
JVN#23823838: CG-WLR300NX vulnerable to cross-site request forgery
CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Firmware Update to the latest version of...
CVE-2016-4822
Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors...
Command injection
Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors...
CVE-2016-4824
The CVE-2016-4824 issue affects Corega CG-WLR300GNV and CG-WLR300GNV-W wireless routers. The WPS PIN authentication implementation does not limit the number of attempts, enabling authenticated brute-force attempts from within wireless range to recover the PIN and gain network access. Affected com...
CVE-2016-4824
The Wi-Fi Protected Setup WPS implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack...
CVE-2016-4822
Corega CG-WLBARGL routers are affected by CVE-2016-4822, a command injection vulnerability. An authenticated attacker can execute arbitrary commands, with impact described as remote arbitrary command execution. The available sources indicate no public fix and advise not using CG-WLBARGL. Practica...