EUVD-2015-7210

Malware in sbrugna...

EUVD-2015-7209

Malware in sbrugna...

Amped Wireless R10000 devices with firmware cross-site request forgery vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A cross-site request forgery vulnerability exists in Amped Wireless R10000 devices with firmware version 2.5.2.11. This allows remote attackers to hijack the authentication of arbitrary user identities...

Amped Wireless R10000 devices with firmware spoofing vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A security vulnerability exists in Amped Wireless R10000 devices with firmware version 2.5.2.11, which originates from the use of an incorrect algorithm to select the ID value in the header of a DNS...

Amped Wireless R10000 devices with firmware credential management vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A credential management vulnerability exists in Amped Wireless R10000 devices with firmware 2.5.2.11. The device's web management interface has an administrator account, which allows remote attackers to...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

Input validation

Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...

CVE-2015-7277

Amped Wireless R10000 router (firmware 2.5.2.11) is affected by CVE-2015-7277 due to use of default admin credentials (admin:admin). A LAN-attacker can gain administrative privileges via the web management interface, enabling full control of the device. Root cause: default credentials configured ...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

Amped Wireless R10000 router contains multiple vulnerabilities

Overview Amped Wireless R10000 router, firmware version 2.5.2.11, uses default credentials, is vulnerable to cross-site request forgery, and uses insufficiently random values for DNS queries. Description CWE-255: Credentials Management - CVE-2015-7277The Amped Wireless R10000 web administration...