157 matches found
PT-2024-19490 · Digisol · Digisol Router
Name of the Vulnerable Software and Affected Versions: Digisol Router DG-GR1321 version v3.2.02 Description: This issue is caused by the improper implementation of password policies. An attacker with physical access could exploit this by creating passwords that do not adhere to the defined securi...
PT-2024-29868 · Digisol · Digisol Router
Name of the Vulnerable Software and Affected Versions: Digisol Router DG-GR1321 version v3.2.02 Description: This issue is caused by the lack of encryption or hashing in storing passwords within the router's firmware/database. An attacker with physical access could exploit this by extracting the...
PT-2024-29859
Name of the Vulnerable Software and Affected Versions: Digisol Router DG-GR1321 version v3.2.02 Description: This issue exists due to the presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART...
CVE-2020-35262
Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...
Cross site scripting
Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...
CVE-2020-35262
CVE-2020-35262 affects Digisol DG-HR3400 with a Cross Site Scripting (XSS) vulnerability exploitable via the NTP configuration server name in the Time and date module and the Keyword field in URL Filter. Public details and CVSS metrics in NVD indicate a network-exploitable flaw (CVSS v3.1 base sc...
CVE-2020-35262
Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...
Digisol Systems DG-HR3400 Cross-Site Scripting Vulnerability
Digisol Systems DG-HR3400 is a wireless router from Digisol Systems, India. The Digisol DG-HR3400 suffers from a cross-site scripting vulnerability that originates from the NTP server name in the system time and the "keyword" in the URL filter...
PT-2021-11740
Name of the Vulnerable Software and Affected Versions: Digisol DG-HR3400 affected versions not specified Description: The issue is a Cross Site Scripting XSS vulnerability that can be exploited via the NTP server name in the Time and date module and the Keyword in the URL Filter. This allows for...
CVE-2020-35262: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...
Exploit for Cross-site Scripting in Digisol Dg-Hr3400_Firmware
CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router...
Command Execution Vulnerability in 1GE+ WIFI Routers
DIGISOL provides complete integrated communication system solutions. Command execution vulnerability exists in 1GE+ WIFI router. An attacker can log into the backend via a weak password and remotely execute commands...
DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 Cross-Site Scripting Vulnerability
DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 is a home wireless router from DIGISOL SYSTEMS India. A cross-site scripting vulnerability exists in the DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300. The vulnerability stems from the lack of proper validation of client data by the WEB...
CVE-2018-14027
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
Design/Logic Flaw
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
CVE-2018-14027
Digisol HR-3300 Wireless Home Router is affected by a cross‑site scripting (XSS) vulnerability, exposed via the userid or password parameter on the admin login page. Multiple connected sources corroborate this vulnerability exists in the Digisol HR-3300 series (e.g., CVE-2018-14027) and describe ...
CVE-2018-14027
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
CVE-2018-14027: Improper Neutralization of Input During Web Page Generation
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
DIGISOL SYSTEMS DG-HR3400 Cross-Site Scripting Vulnerability
DIGISOL SYSTEMS DG-HR3400 is a wireless router from DIGISOL SYSTEMS India. A cross-site scripting vulnerability exists in the DIGISOL SYSTEMS DG-HR3400. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit the vulnerability to...
PT-2019-9019
Name of the Vulnerable Software and Affected Versions Digisol Wireless Wifi Home Router HR-3300 Description The issue allows for XSS via the userid or password parameter to the "admin login page" API endpoint. Recommendations For Digisol Wireless Wifi Home Router HR-3300, avoid using the userid o...