CVE-2022-23135: Improper Limitation of a Pathname to a Restricted Directory

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which...

Huawei HG659 suffers from information leakage vulnerability

The Huawei HG659 is a home gateway. An information disclosure vulnerability exists in Huawei HG659, which can be exploited by attackers to obtain sensitive information...

Huawei Home Gateway Detection (HTTP)

HTTP based detection of Huawei Home Gateway devices. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei HG659 suffers from an arbitrary file read vulnerability

The Huawei HG659 is a home gateway. An arbitrary file read vulnerability exists in the Huawei HG659, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in HG630 V2 Home Gateway of Huawei Technologies Co.

Founded in 1987, Huawei Technologies Co., Ltd. is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the Huawei Technologies HG630 V2 Home Gateway, which can be exploited by attackers to obtain sensitive...

Command Execution Vulnerability in BHW L7 Home Gateway

BHW L7 Home Gateway is a home gateway from Beijing BHW Technology Co. A command execution vulnerability exists in the BHW L7 Home Gateway, which can be exploited by an attacker to gain control of the server...

ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Vulnerability

Exploit Title: ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: http://www.zblchina.com http://www.wd-thailand.com Vendor: Zhejiang BC&TV Technology Co., Ltd. ZBL | W&D Corporation WAD TECHNOLOGY THAILAND Product web page:...

Weak Password Vulnerability in BHW L7 Home Gateway

BHW L7 Home Gateway is a home gateway from Beijing BHW Technology Co. A weak password vulnerability exists in BHW L7 Home Gateway. An attacker can use this vulnerability to log into the system background and obtain sensitive information...

Skyworth Home Gateway Smart Terminal DT541-csg suffers from Denial of Service Vulnerability (CNVD-2021-10398)

hereinafter referred to as "Skyworth Digital" is a national high-tech enterprise focusing on providing comprehensive and systematic digital home solutions and services for global users. A denial of service vulnerability exists in the Skyworth Home Gateway Smart Terminal DT541-csg, which can be...

Denial of Service Vulnerability in Skyworth Home Gateway Smart Terminal DT741-csg (CNVD-2021-10397)

hereinafter referred to as "Skyworth Digital" is a national high-tech enterprise focusing on providing comprehensive and systematic digital home solutions and services for global users. A denial of service vulnerability exists in the Skyworth Home Gateway Smart Terminal DT741-csg, which can be...

Skyworth Home Gateway Smart Terminal DT720-cs Has Denial of Service Vulnerability

hereinafter referred to as "Skyworth Digital" is a national high-tech enterprise focusing on providing comprehensive and systematic digital home solutions and services for global users. A denial of service vulnerability exists in the Skyworth Home Gateway Smart Terminal DT720-cs, which can be...

Denial of Service Vulnerability in Home Gateway DT741-csf

Shenzhen Skyworth Digital Technology Co., Ltd. business scope includes: development, research, operation of digital video broadcasting system series products, research and development, sales of multimedia information system. A denial of service vulnerability exists in the home gateway DT741-csf,...

ASUS SmartHome Gateway HG100, WS-101 and TS-101 Denial of Service Vulnerabilities

ASUS SmartHome Gateway HG100 and others are products of ASUS, Taiwan, China.ASUS SmartHome Gateway HG100 is a smart home central control gateway device.ASUS WS-101 is a smart switch sensor.TS-101 is a temperature/humidity sensor. A security vulnerability exists in ASUS SmartHome Gateway HG100...

CVE-2019-5985

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005...

CVE-2019-5985

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005...

CVE-2019-5986

CVE-2019-5986 affects Hikari Denwa router/Home GateWay devices from Nippon Telegraph and Telephone (both East and West branches). Description across sources confirms a Cross-site Request Forgery (CSRF) vulnerability that lets remote attackers hijack administrator authentication via unspecified ve...

CVE-2019-5985

CVE-2019-5985 is a cross-site scripting vulnerability in Nippon Telegraph and Telephone Hikari Denwa router/Home GateWay devices (East/West variants). The issue affects multiple firmware lines (e.g., PR-S300NE/RT-S300NE/RV-S340NE v19.41 and earlier; PR-S300HI/RT-S300HI/RV-S340HI v19.01.0005 and e...

CVE-2019-5985

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005...

CVE-2019-5986: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Hikari Denwa router/Home GateWay Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version...

CVE-2019-5985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005...