GHSA-XW98-5Q62-JX94 Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (Slowloris DOS)

Impact There is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared before the TLS handshake is completed. When a TLS handshake read error occurs, the code...

D-link DIR-823X Sub Process Arbitrary Command Execution

The vulnerability of the sub420688 /goform/setqos function in D-link DIR-823X router microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially craft...

D-Link DIR-615 Router adv_firewall.php Code Execution

The vulnerability of the advfirewall.php implementation of the DMZ Host Feature component of the D-Link DIR-615 router microsystem lies in the failure to eliminate special elements used in the operating system’s command when processing the dmzipaddr parameter. Exploiting this vulnerability allows...

D-Link DIR-615 Router Code Execution

The vulnerability of the advrouting.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the...

DWR-M921 Router Sub_419920 Function Code Execution

The vulnerability of the sub419920 /boafrm/formLtefotaUpgradeQuectel function in the DWR-M921 router microprogramming software is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failure...

D-Link DI-7100G Router Command Execution

The vulnerability of the setjhttpdinfo function in D-Link DI-7100G C1 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the usbusername parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Tenda RX3 Router DoS

The vulnerability of the /goform/openSchedWifi file in the microprogramming software for Tenda RX3 routers stems from the copying of buffers without checking the size of the input data during the processing of the schedStartTime/schedEndTime parameters. Exploiting this vulnerability could allow a...

Tenda RX3 set_device_name MAC Filtering Configuration DoS

The vulnerability of the setdevicename function /goform/setBlackRule of the MAC Filtering Configuration Endpoint component in the Tenda RX3 microprogramming router software lies in the copying of buffer data without checking the size of the input data during the processing of the devName/mac...

Tenda W20E getMibPrefix function DoS

The vulnerability of the getMibPrefix function goform/formWifiFilterRulesAdd in the Tenda W20E router microprogramming software is related to the operation going beyond the buffer in memory when processing the nptr parameter. Exploiting this vulnerability could allow a remote attacker to cause...

UTT 521G Router Sub_446B18 Arbitrary Command Execution

The vulnerability of the sub446B18 function in the /goform/formPdbUpConfig file of the UTT 521G router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command processing when handling the policyNames parameter...

Tenda RX3 Router DoS

The vulnerability of the fromSetIpMacBind function /goform/SetIpMacBind in the Tenda RX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Tenda W20E sprintf Heap Buffer Overflow DoS

The vulnerability of the sprintf function goform/formDelWewifiPic in the microprogramming software for Tenda W20E routers stems from the operation that goes beyond the buffer boundaries in memory when processing the picName parameter. Exploiting this vulnerability can allow an attacker to cause...

D-link DIR-823X Configuration Handler Sub_4208A0 Arbitrary Command Execution

The vulnerability of the sub4208A0 /goform/setdmz function in the Configuration Handler component of the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the dmzhost/dmzenable parameter. Exploiting th...

D-Link DIR-600 B5 Router ssdp.cgi Command Execution

The vulnerability of the ssdp.cgi file of the D-Link DIR-600 B5 router’s microprogramming system is related to insufficient checking of arguments passed in the command when processing the parameters HTTPST/REMOTEADDR/REMOTEPORT/SERVERID. Exploiting this vulnerability allows a remote attacker to...

D-link DIR-823X Sub Process Command Execution

The vulnerability of the sub420618 function in the /goform/setupnp function of the D-link DIR-823X microprogramming router software is related to the failure to take measures to neutralize special elements during the processing of the upnpenable parameter. Exploiting this vulnerability allows a...

Pix-Link LV-WR21Q Function Unauthenticated Access

The vulnerability of the /goform/getHomePageInfo function in the microprogramming software for Pix-Link LV-WR21Q routers is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Tenda TX3 Router SetIpMacBind Data Compromise

The vulnerability of the goform/SetIpMacBind function in the Tenda TX3 router microprogramming system lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibili...

Tenda RX3 Router DoS

The vulnerability of the setqosMiblist /goform/formSetQosBand function in the Tenda RX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

Tenda W20E Arbitrary Command Execution

The vulnerability of the pPortMapIndex function implemented in goform/formDelPortMapping of the Tenda W20E router software is related to the execution of operations outside the buffer in the parameter strcpy area of memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...

Tenda W20E Router Arbitrary Command Execution

The vulnerability of the addWewifiWhiteUser function in the goform/formAddWewifiWhiteUser function of the Tenda W20E router’s microprogramming software is related to the execution of operations outside the buffer in the userInfo parameter’s memory. Exploiting this vulnerability could allow a remo...