The vulnerability of the Root Access Control component of the Totolink X2000R microprogramming system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Root Access Control component of the Totolink X2000R microprogramming system for routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2025-17955 · Gl.Inet · Gl.Inet Router Firmware

Name of the Vulnerable Software and Affected Versions: GL.iNet router firmware versions 4.x Description: A vulnerability was found in the Download Interface component of the GL.iNet router firmware, affecting some unknown processing. The manipulation leads to improper authorization...

The vulnerability of Tenda AC15 router’s microprogramming software, related to reading data outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Tenda AC15 router’s microprogramming software lies in the reading of data outside the buffer in memory when processing the SYSPS parameter. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted request...

The vulnerability of the Telnet service of the TOTOLINK A810R router’s microprogramming system allows a intruder to disclose protected information.

The vulnerability of the Telnet service in the microprogramming software of TOTOLINK A810R routers is related to the use of strictly encrypted login credentials. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2025-28025

CVE-2025-28025 describes a buffer overflow in TOTOLINK downloadFile.cgi via the v14 parameter affecting A830R (4.1.2cu.5182_B20201102), A950RG (4.1.2cu.5161_B20200903), A3000RU (5.9c.5185_B20201128), and A3100R (4.1.2cu.5247_B20211129). Documents indicate the vulnerability exists in the downloadF...

The vulnerability of the fromRouteStatic function in the microprogramming software for wireless Wi-Fi routers Tenda W30E allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda W30E wireless routers involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the ipsec_road_asp function in D-Link DI-8003 router microprogramming software allows a attacker to cause a service failure.

The vulnerability of the ipsecroadasp function in D-Link DI-8003 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of D-Link DIR-816 router microprogramming software, related to the lack of protective measures for website structures, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of D-Link DIR-816 router’s microprogramming software is related to the lack of measures taken to protect the website structure during the processing of SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of D-Link DSL-3782 router’s microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DSL-3782 router microprogramming software is related to buffer overflows in the stack when processing parameters sstartip, sendip, dstartip, and dendip. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted...

CVE-2024-46450

Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request...

PT-2025-3847 · Nec · Aterm Wx4200D5 +4

Name of the Vulnerable Software and Affected Versions: NEC Corporation Aterm WG2600HS versions 1.7.2 and earlier NEC Corporation Aterm WG2600HP4 versions 1.4.2 and earlier NEC Corporation Aterm WG2600HM4 versions 1.4.2 and earlier NEC Corporation Aterm WG2600HS2 versions 1.3.2 and earlier NEC...

Netis Router Exploit Chain Reactor (CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457).

Several Netis Routers including rebranded routers from GLCtec and Stonet suffer from a command injection vulnerability at the change admin password page of the router web interface see CVE-2024-48456 for more details. The vulnerability stems from improper handling of the 'password' and 'new...

The vulnerability of the websReadEvent function in the microprogramming software for Tenda i22 allows a hacker to trigger a service failure.

The vulnerability of the websReadEvent function in the Tenda i22 router microprogramming system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-32946

A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via Web and FTP services, exposing it to network sniffing attacks...

CVE-2024-33700

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption...

The vulnerability of the dbsrv_asp function in D-Link DI-8100 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the dbsrvasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-8227

A vulnerability was found in Tenda O1 1.0.0.710648 and classified as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffer...

The vulnerability of the formWifiBasicSet function in the microprogramming software for Tenda A301 allows a hacker to cause a service failure.

The vulnerability of the formWifiBasicSet function in the microprogramming software for Tenda A301 routers is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of D-Link DSL-225 router microprogramming software lies in its ability to bypass the authentication process by using an alternative path or channel. This allows attackers to circumvent the authentication procedures and gain increased privileges.

The vulnerability of D-Link DSL-225 router microprogramming software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and gain increased privileges...

CVE-2024-41689

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WP...