Askey AP5100W Dual SIG Security Feature Issue Vulnerability

The Askey AP5100W Dual SIG is a router from China-based Askey Electronics Technology Askey. The Askey AP5100W Dual SIG suffers from a security signature issue vulnerability that stems from a faulty random number selection in the Diffie-Hellman exchange. By capturing an attempted or even failed WP...

CVE-2018-19982

CVE-2018-19982 affects KT MC01507L Z-Wave S0 devices. The issue arises because HPKP is not implemented, enabling an attacker on the same network to use IP Changer to redirect packets destined for the Server to a proxy, allowing sniffing of cleartext between Server and Controller. The attacker can...

PT-2018-15184

Name of the Vulnerable Software and Affected Versions KT MC01507L Z-Wave S0 devices affected versions not specified Description The issue arises due to the lack of HPKP implementation, allowing an attacker on the same network as the target HUB to intercept cleartext communication between the Serv...

CVE-2016-5638 Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

CVE-2016-5638: Cleartext Transmission of Sensitive Information

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

PT-2018-4931

Name of the Vulnerable Software and Affected Versions Netgear WNDR4500 firmware version V1.0.1.40 1.0.6877 Description A remote attacker can access certain web pages associated with the genie app without authentication. Specifically, accessing genie ping.htm, genie ping2.htm, or genie ping3.htm...

Millions of IoT Devices Vulnerable to Z-Wave Downgrade Attacks, Researchers Claim

The popular home automation protocol Z-Wave, used by millions of IoT devices, is vulnerable to a downgrade attack that could allow an adversary to take control of targeted devices, according to researchers. Z-Wave is a wireless protocol used by 2,400 vendors; its wireless chipsets are embedded in...

Z-Shave. Exploiting Z-Wave downgrade attacks

TL;DR: Stronger S2 Z-Wave pairing security process can be downgraded to weak S0, exposing smart devices to compromise. Z-Wave uses a shared network key to secure traffic. This key is exchanged between the controller and the client devices ‘nodes’ when the devices are paired. The keys are used to...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

WPS Protocol Key Disclosure

Vulnerability exists in the WPS protocol, which is designed for simplified setup of secure Wi-Fi connections. During authentication, when checking the PIN code, the Wi-Fi device returns various EAP-NACK messages, depending on which half of the entered PIN code is incorrect. This allows a remote...

CVE-2013-3069

CVE-2013-3069 concerns multiple XSS flaws in NETGEAR WNDR4700 firmware 1.0.0.34. The vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML through four vectors: (1) UserName or (2) Password on the NAS User Setup page, (3) deviceName on USB_advanced.htm, and (4) N...

Windows Gather Wireless Profile

This module extracts saved Wireless LAN profiles. It will also try to decrypt the network key material. Behavior is slightly different between OS versions when it comes to WPA. In Windows Vista/7 we will get the passphrase. In Windows XP we will get the PBKDF2 derived key. This module requires...

openlookup-info NSE Script

Parses and displays the banner information of an OpenLookup network key-value store server. Example Usage nmap -p 5850 --script openlookup-info Script Output 5850/tcp open openlookup | openlookup-info: | sync port: 5850 | name: Paradise, Arizona | your address: 127.0.0.1:50162 | timestamp:...

D-Link bsc_wlan.php Access Bypass

Exploit for hardware platform in category web applications ================================= D-Link bscwlan.php Access Bypass ================================= Hello All, Here is another D-Link vulnerability where you can change the network Key i.e., WEP, WPAx keys. Requirement: 1. You need to ha...

D-Link bsc_wlan.php Access Bypass

Hello All, Here is another D-Link vulnerability where you can change the network Key i.e., WEP, WPAx keys. Requirement: 1. You need to have access to the internal network of that router. The two scenarios are mentioned below: Scenario A: You know the network/ WIFI key to connect to the WIFI netwo...