Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is...

TP-Link 8840T DSL router default remote management vulnerability

Overview The TP-Link 8840T DSL router's remote management feature is enabled by default. Description The TP-Link 8840T DSL router allows remote WAN internet users access to the administrator web interface of the device by default. --- Impact A remote unauthenticated attacker may be able to access...

CVE-2011-0746

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

CVE-2011-0746

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

CVE-2011-0746

The CVE-2011-0746 entry documents a CSRF/XSS vulnerability in the ZyXEL O2 DSL Router Classic. The issue is in the web form /Forms/PortForwarding_Edit_1 where the PortRule_Name parameter can be used to insert XSS payloads, enabling remote attackers to hijack administrator authentication for craft...

O2 DSL Router Classic router crossite scripting

Crossite scripting in administration interface...

DSL router remotely controlled by URL

From The H Security Security researcher Michal Sajdak revealed at CONFidence 2009 in Krakow in mid-May that it’s relatively easy to make the Linksys WAG54G2 WLAN DSL router execute arbitrary shell commands. He has now published securitum.pl further details. Sajdak discovered that it’s easy to add...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...

CVE-2008-1252

bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...

Galaxy FTP Server 1.0 (Neostrada Livebox DSL Router) DoS Exploit

No description provided by source. / Discovered bY 0in From DaRk-CodeRs Programming & Security Group! Contact: 0indotemailatgmaildotcom HOMEPAGE: http://dark-coders.4rh.eu DESCRIPTION: Livebox router is vulnerability to remote but from local network, because firewall working.. buffer overflow DoS...

Planet VC-200M DSL router DoS

Inaccessible administration interface on HTTP GET request with missed Host: header...

INCA IM-204 DSL router multilpe security vulnerabilities

Directory traversal, information leak...

CVE-2003-1250

Affected product: Efficient Networks 5861 DSL router. Vulnerability: When running firmware 5.3.80 and configured to block incoming TCP SYN, the device can be remotely crashed by a flood of TCP SYN packets to the WAN interface (e.g., via a port scanner). Impact: Denial of service (device crash). E...

CVE-2003-1250

Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service crash via a flood of TCP SYN packets to the WAN interface using a port scanner such as nmap...

Linksys Gozila CGI DoS Vulnerability

The Linksys BEFSR41 EtherFast Cable/DSL Router crashes if somebody accesses the Gozila CGI without argument on the web administration interface. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

CVE-2001-1538

CVE-2001-1538 affects the SpeedXess HA-120 DSL router. The vulnerability arises from a default administrative password of "speedxess" that allows remote access. The connected sources confirm the issue and its basic impact (unauthorized access to admin functions) but do not provide any remediation...

CVE-2001-1430

CVE-2001-1430 concerns the Cayman 3220-H DSL Router (1.0) shipped with no password, enabling remote attackers to gain unauthorized access. The vulnerability stems from the device shipping without credentials, leading to potential compromise of confidentiality, integrity, and availability as indic...

CVE-2001-1430

Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access...

CVE-2002-1236

The CVE-2002-1236 issue affects Linksys BEFSR41 EtherFast Cable/DSL Router. Affected component: the remote web management CGI script Gozila.cgi. Root cause: when Gozila.cgi is accessed with no arguments, the router crashes, causing a denial of service. Impact: partial availability loss of the dev...

CVE-2003-1250

Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service crash via a flood of TCP SYN packets to the WAN interface using a port scanner such as nmap...