CVE-2024-54143

openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-256 hashes to only 12 characters. This significantly reduces entropy, making it feasible for an attacker to generate collisions. By exploiting this, a previously built malicious...

CVE-2024-54143

creationtimestamp| type| source ---|---|--- 2024-12-06 16:25:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113606809513943170 2024-12-06 18:58:12+00:00| seen| https://t.me/cvedetector/12246 2024-12-09 14:20:03+00:00| seen| https://t.me/habrcomnews/32682 2024-12-10 01:02:23+00:00|...

OpenWrt 安全漏洞

OpenWrt is a Linux operating system for embedded devices. A security vulnerability exists in versions prior to OpenWrt 920c8a1 that stems from a truncated SHA-256 hash down to 12 characters, reducing security and allowing the generation of malicious images...

Security Advisory 2022-10-04-1 - wolfSSL buffer overflow during a TLS 1.3 handshake (CVE-2022-39173)

DESCRIPTION In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow on server during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are...

OpenWrt Security Vulnerabilities

OpenWrt is a Linux operating system for embedded devices. A security vulnerability exists in OpenWrt 19.07.x before 19.07.7, which stems from the fact that when IPv6 is used, a routing loop may be created that generates excessive network traffic between an affected device and the router of its...

Denial of Service Vulnerability in OpenWrt

OpenWRT is a highly modular, highly automated embedded Linux system with powerful networking components and extensibility that is often used in industrial control devices, telephones, small robots, smart homes, routers, and VOIP devices. A denial of service vulnerability exists in OpenWrt, which...

The vulnerability of the umdns function in the embedded operating system OpenWrt allows a hacker to trigger buffer overflows.

The vulnerability of the umdns function in the embedded operating system OpenWrt relates to reading data beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to trigger a buffer overflow...

The vulnerability of the libubox library in the embedded operating system OpenWrt, which allows a hacker to execute arbitrary code.

The vulnerability of the libubox library in the embedded operating system OpenWrt relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-11966

In IQrouter through 3.3.1, the Lua function resetpassword in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration which has a...

PT-2018-10312 · Openwrt · Openwrt

Name of the Vulnerable Software and Affected Versions: OpenWrt affected versions not specified Description: The issue concerns the mishandling of access control in certain configuration files, potentially allowing remote authenticated users to call arbitrary methods, which could lead to remote...