DIGISOL DG-BR4000NG - Cross-Site Scripting

Exploit Title: DIGISOL DG-BR4000NG - Cross-Site Scripting Date: 2018-06-24 Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-BR4000NG-Wireless-Broadband-802-11n/dp/B00A19EHYK Category: Hardware Exploit Author: Adipta Basu Contact :...

CVE-2018-12706

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header...

CVE-2018-12705

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

Buffer overflow

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header...

Design/Logic Flaw

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12706

DIGISOL DG-BR4000NG wireless router has a buffer overflow vulnerability in the web interface triggered by a long Authorization HTTP header. Connected sources describe exploitation PoCs that add excessive data after the Basic Authorization string, causing the router to restart and the web interfac...

CVE-2018-12705

The affected device is DIGISOL DG-BR4000NG wireless router. It has a Cross-Site Scripting (XSS) vulnerability in its management interface that is triggered by the SSID value, with input validation performed only on the client side. The flaw allows injection of arbitrary scripts via the SSID field...

CVE-2018-12705

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12706

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header...

PT-2018-11344

Name of the Vulnerable Software and Affected Versions DIGISOL DG-BR4000NG affected versions not specified Description The issue is related to a Buffer Overflow that can be triggered via a long Authorization HTTP header. Recommendations At the moment, there is no information about a newer version...

CVE-2018-12706: Improper Restriction of Operations within the Bounds of a Memory Buffer

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header...

CVE-2018-12705: Improper Neutralization of Input During Web Page Generation

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

PT-2018-11343

Name of the Vulnerable Software and Affected Versions DIGISOL DG-BR4000NG devices affected versions not specified Description The issue concerns a security problem where DIGISOL DG-BR4000NG devices are affected by XSS via the SSID. The SSID is validated only on the client side, which can lead to...

DIGISOL DG-BG1100N ROM-0 Backup File Disclosure

Exploit Title : ROM-0 Backup File Disclosure on DIGISOL Date : 24-08-2017 Exploit Author : Sudin nk Vendor Homepage: http://www.digisol.com Tested Routers : DG-BG1100N ADSL 2/2+ Modem Wifi Router Tested on : Parrotsec x8664 ROM-0 Backup File Disclosure on DIGISOL A dangerous vulnerability present...

DIGISOL DG-HR1400 1.00.02 Privilege Escalation

Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896 https://vuldb.com/sv/?id.97954...

DIGISOL DG-HR1400 Privilege Vulnerability

The DIGISOL DG-HR1400 is a wireless router. A privilege-lifting vulnerability exists in the DIGISOL DG-HR1400. An attacker can gain administrative privileges by modifying the cookie value of a Base64encoded session to execute arbitrary code in an affected environment...

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation Vulnerability

Exploit for hardware platform in category web applications Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896...

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896...

DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation

Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896 https://vuldb.com/sv/?id.97954...

CVE-2017-6896

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...