311 matches found
CVE-2016-4823
CVE-2016-4823 affects Corega CG-WLBARAGM devices. The vulnerability is a denial-of-service that allows an unauthenticated remote attacker to cause the product to reboot. Documents in the connected set identify the affected component as the CG-WLBARAGM router and describe the impact as a reboot vi...
PT-2016-6166
Name of the Vulnerable Software and Affected Versions Corega CG-WLBARAGM devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a reboot of the device, via unspecified vectors. Recommendations At the moment, there is no...
PT-2016-6165 · Corega · Corega Cg-Wlbargl
Name of the Vulnerable Software and Affected Versions: Corega CG-WLBARGL devices affected versions not specified Description: The issue allows remote authenticated users to execute arbitrary commands via unspecified vectors. Recommendations: At the moment, there is no information about a newer...
CVE-2016-4823: Undefined Security Weakness
Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service reboot via unspecified vectors...
PT-2016-6167
Name of the Vulnerable Software and Affected Versions Corega CG-WLR300GNV and CG-WLR300GNV-W devices affected versions not specified Description The issue concerns the Wi-Fi Protected Setup WPS implementation, which does not limit the number of PIN authentication attempts. This oversight allows...
CVE-2016-4824: Undefined Security Weakness
The Wi-Fi Protected Setup WPS implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack...
CVE-2016-4822: Improper Neutralization of Special Elements used in a Command
Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors...
Corega CG-WLBARAGM Denial of Service Vulnerability
The Corega CG-WLBARGL is a wireless LAN router from Corega Japan. A denial of service vulnerability exists in Corega CG-WLBARAGM. A remote attacker can exploit this vulnerability to cause a denial of service reboot...
CG-WLR300GNV Series does not limit authentication attempts
Overview CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Takeshi Okamoto of Kanagawa Institute of Technology and Takaaki Minegish...
JVN#75028871: CG-WLR300GNV Series does not limit authentication attempts
CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Impact An unauthenticated attacker within wireless range of the device may perfor...
JVN#76653039: CG-WLBARGL vulnerable to command injection
CG-WLBARGL provided by Corega Inc is a wireless LAN router. CG-WLBARGL contains a command injection vulnerability. Impact An arbitrary command may be executed by an authenticated attacker. Solution Do not use CG-WLBARGL As of Jun 22nd, 2016, there are no practical solutions to this issue. It is...
JVN#24409899: CG-WLBARAGM vulnerable to denial-of-service (DoS)
CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains a denial-of-service DoS vulnerability. Impact An unauthenticated remote attacker may cause the product to reboot. Solution Apply a Workaround The following workarounds may mitigate the affects of this vulnerability...
DEBIAN-CVE-2015-8604
SQL injection vulnerability in the hostnewgraphs function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cgg parameter in a save action...
CVE-2016-1158
CVE-2016-1158 affects Corega CG-WLBARGMH and CG-WLBARGNL wireless routers. The described issue is a Cross-Site Request Forgery (CSRF) that lets an attacker hijack administrator sessions to perform administrative actions when a logged-in user visits a malicious page. Connected sources (JVN/JVNDB, ...
PT-2016-4612
Name of the Vulnerable Software and Affected Versions Corega CG-WLBARGMH and CG-WLBARGNL devices affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that perform administrative...
CVE-2016-1158: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administrative functions...
JVN#59349382: Multiple Corega wireless LAN routers vulnerable to cross-site request forgery
Multiple wireless LAN routers provided by Corega Inc contain a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged into the management screen, various administrative functions may be performed. Solution Apply a workaround The following workaround...
PT-2016-3930
Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8f and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the cg g parameter in a save action. The host new graphs function in graphs new.php is the...
