Lucene search
+L

702 matches found

CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•13 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.21, which originates from the parameter mschapen in the file /pppoebase.asp that fails to...

9CVSS8AI score0.0098EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/22 10:06 p.m.•12 views

CVE-2022-20849

A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error...

6.1CVSS6.8AI score0.00277EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•14 views

The vulnerability of the formPPPoESetup function in the microprogramming software for routers EDIMAX RE11S allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX RE11S routers stems from copying buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitra...

10CVSS6AI score0.00634EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2025/03/31 9:15 p.m.•14 views

CVE-2024-54803

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter pppoepeermac and forcing a reboot. This will result in command injection...

9.8CVSS5.8AI score0.0166EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2024-27015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not mat...

5.5CVSS5.5AI score0.0023EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/28 7:15 p.m.•17 views

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

8CVSS6.1AI score0.00417EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•16 views

TP-LINK TL-WR841ND 安全漏洞

TP-LINK TL-WR841ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR841ND V11 version, which originates from the username and password parameters of /userRpm/PPPoEv6CfgRpm.htm contain a buffer overflow vulnerability...

4.9CVSS7.3AI score0.0042EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/12 6:15 p.m.•17 views

CVE-2025-25741

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module...

5.4CVSS6.1AI score0.00469EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•17 views

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module not properly handling user input. No detailed vulnerability details are provided at this...

5.4CVSS7.3AI score0.00469EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•24 views

PT-2025-4745

Name of the Vulnerable Software and Affected Versions RE11S version 1.11 Description A stack overflow issue was discovered in the formPPPoESetup function via the pppUserName parameter. This issue affects the PPPoE setup functionality. Recommendations For RE11S version 1.11, as a temporary...

10CVSS7.1AI score0.00634EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•16 views

PT-2025-30855

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netfilter module, specifically in the nf flow pppoe proto function. A bug was identified where the Ethernet header was not accounted for,...

5.5CVSS6.8AI score0.00168EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•14 views

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software is related to buffer overflows in the stack when processing the pppoelocalnetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted POST request...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/19 12:00 a.m.•27 views

The vulnerability in the wizpppoe.cgi script of the microprogramming software for Netgear XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the wizpppoe.cgi microprogramming software of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/19 12:00 a.m.•23 views

The vulnerability in the pppoe2.cgi script of the microprogramming software for Netgear XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the pppoe2.cgi microprogramming of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause service failures ...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/19 12:00 a.m.•18 views

The vulnerability in the geniepppoe.cgi script of Netgear’s router software models R7000P and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniepppoe.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software3
Positive Technologies
Positive Technologies
•added 2024/11/16 12:00 a.m.•8 views

PT-2025-13826

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue allows an attacker to send a specially crafted request to the "post.cgi" endpoint, updating the pppoe peer mac parameter in nvram and forcing a reboot, resulting in command injection...

9.8CVSS5.8AI score0.0166EPSS
SaveExploits1References6
NVD
NVD
•added 2024/11/15 4:15 p.m.•18 views

CVE-2022-20849

A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error...

6.1CVSS0.00277EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/15 3:31 p.m.•30 views

CVE-2022-20849 Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability

A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error...

6.1CVSS0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/15 3:31 p.m.•12 views

CVE-2022-20849 Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability

A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error...

6.1CVSS7.1AI score0.00277EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•3 views

CVE-2022-20849: Unchecked Error Condition

A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error...

6.1CVSS6.3AI score0.00277EPSS
SaveExploits0References1
Rows per page
Query Builder