EUVD-2015-7211

Malware in sbrugna...

EUVD-2015-7212

Malware in sbrugna...

ReadyNet WRT300N-DD devices with firmware spoofing vulnerability

ReadyNet WRT300N-DD devices with firmware is a wireless router product from ReadyNet New Zealand. A spoofing vulnerability exists in ReadyNet WRT300N-DD devices with firmware 1.0.26. Since the devices use the same source port for DNS lookups, a remote attacker could select this number as the...

CVE-2015-7282

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

CVE-2015-7281

Cross-site request forgery CSRF vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7280

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

Default credentials

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7280

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

PT-2015-7498

Name of the Vulnerable Software and Affected Versions ReadyNet WRT300N-DD version 1.0.26 Description The web administration interface has a default password of admin for the admin account, allowing remote attackers to obtain administrative privileges by leveraging a LAN session. Recommendations F...

PT-2015-7499

Name of the Vulnerable Software and Affected Versions ReadyNet WRT300N-DD version 1.0.26 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For version 1.0.26, update the firmware to a version that addresses this...

PT-2015-7500

Name of the Vulnerable Software and Affected Versions ReadyNet WRT300N-DD version 1.0.26 Description The issue makes it easier for remote attackers to spoof DNS responses by using the same source port number for every DNS query. Recommendations For ReadyNet WRT300N-DD version 1.0.26, consider...

CVE-2015-7282: Improper Input Validation

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

CVE-2015-7281: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7280: Undefined Security Weakness

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...