Design/Logic Flaw

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...

Design/Logic Flaw

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...

Code injection

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...

CVE-2015-7793

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...

CVE-2015-7793

CVE-2015-7793 affects Corega CG-WLBARAGM wireless routers. The issue is that the device may behave as an open proxy, enabling remote attackers to trigger outbound network traffic via unspecified vectors. Documents from JVN/NVD/NVD-linked records confirm the affected product and open-proxy behavio...

CVE-2015-7794

CVE-2015-7794 affects Corega CG-WLNCM4G devices that may act as an open DNS resolver. This condition enables an unauthenticated remote attacker to weaponize the device for a DNS amplification attack, contributing to a DDoS scenario. Documented impact describes a denial of service via crafted quer...

CVE-2015-7792

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...

CVE-2015-7794

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...

CVE-2015-7792

CVE-2015-7792 affects Corega CG-WLBARGS wireless LAN routers. The vulnerability arises from CG-WLBARGS not properly performing authentication, enabling an attacker who can access the device to log in with administrative privileges and perform arbitrary administrative operations. The issue is mapp...

Corega CG-WLNCM4G devices denial of service vulnerability

Corega CG-WLNCM4G is a network camera offered by Corega. A denial of service vulnerability exists in Corega CG-WLNCM4G devices. It allows remote attackers to cause a denial of service attack by leveraging unspecified vectors...

PT-2015-7615

Name of the Vulnerable Software and Affected Versions Corega CG-WLBARAGM devices affected versions not specified Description The issue allows remote attackers to trigger outbound network traffic via unspecified vectors, as the devices provide an open proxy service. Recommendations At the moment,...

CVE-2015-7794: Improper Input Validation

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...

CVE-2015-7792: Undefined Security Weakness

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...

CVE-2015-7793: Undefined Security Weakness

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...

PT-2015-7614

Name of the Vulnerable Software and Affected Versions Corega CG-WLBARGS devices affected versions not specified Description The issue allows remote attackers to perform administrative operations. Recommendations At the moment, there is no information about a newer version that contains a fix for...

PT-2015-7616

Name of the Vulnerable Software and Affected Versions Corega CG-WLNCM4G devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, specifically traffic amplification, by sending crafted queries to an open DNS resolver. Recommendations At th...

CG-WLBARAGM may behave as an open proxy

Overview CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Akihiro Nakajima of NTT Communications reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#51349622: CG-WLBARGS does not properly perform authentication

CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Impact An attacker who can access the product may log in with administrative privileges. As a result, an arbitrary administrative operations may be executed. Solution Apply a Workaroun...

JVN#50775659: CG-WLBARAGM may behave as an open proxy

CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Impact The device may be leveraged as a proxy server to conduct cyber attacks. Solution Apply a Workaround The following workaround may mitigate the affects of this...

JVN#51250073: CG-WLNCM4G may behave as an open resolver

CG-WLNCM4G provided by Corega Inc is a network camera. CG-WLNCM4G contains an issue where it may behave as an open resolver. Impact The device may be leveraged for use in a DNS amplification attack and unknowingly become a part of a DDoS attack. Solution Do not use CG-WLNCM4G As of December 25,...