The vulnerability of D-Link DIR-816 A2 wireless routers’ microprogramming software lies in the fact that the operation is performed outside the buffer in memory. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the microprogrammed software of D-Link DIR-816 A2 wireless routers is related to the escape from the buffer boundaries in memory, resulting from the failure to take measures to neutralize special elements used in the operating system’s command for processing the urladd...

TOTOLINK LR1200GB Buffer Overflow Vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's Gion Electronics TOTOLINK. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability that originates from the parameter httphost in the file /cgi-bin/cstecgi.cgi that can lead to a stack-based buffer overflow, and n...

TOTOLINK X6000R Command Injection Vulnerability

The TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X6000R AX3000 version 9.4.0cu.85220230719. An attacker could exploit this vulnerability to perform a command injection attack...

D-Link DIR882 Security Vulnerability

The D-Link DIR882 is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR882 DIR882A1FW130B06 firmware version, which originated from a vulnerability that allows attackers to run arbitrary commands via /HNAP1/ using a crafted POST request...

Tenda AX12 and Tenda AX9 Security Vulnerabilities

Tenda AX12 and Tenda AX9 are both products of Tenda China.Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router.Tenda AX9 is a Wi-Fi 6 router. A security vulnerability exists in the Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46...

ELECOM wireless LAN routers security vulnerability

ELECOM wireless LAN routers are a series of routers from ELECOM Japan. A security vulnerability exists in ELECOM wireless LAN routers. An attacker could exploit the vulnerability to execute arbitrary operating system commands by sending specially crafted requests. The following products and...

TOTOLINK X5000R 安全漏洞

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC10 version V4.0 and V16.03.10.20, which originates from a buffer overflow vulnerability in the sub49B384 function...

VulnCheck KEV: CVE-2023-7311

BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoint. The path parameter is not properly validated and is echoed into a shell context, allowing an attacker to inject and execute arbitrary shell commands on the device. Successfu...

CVE-2023-47167

A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to...

TP-LINK ER7206 Operating System Command Injection Vulnerability

The TP-LINK ER7206 is a multifunction Gigabit router from China P&L TP-LINK. An operating system command injection vulnerability exists in the TP-LINK ER7206 version 1.3.0 build 20230322 Rel.70591, which stems from a specially crafted HTTP request that could lead to arbitrary command injection...

The vulnerability of the /cgi-bin/cstecgi.cgi file of the Totolink N350RT router’s microprogramming system, which allows a hacker to disclose protected information.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the Totolink N350RT router’s microprogramming system is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

TOTOLINK N200RE main function buffer overflow vulnerability

The TOTOLINK N200RE is a wireless router for the SOHO market. The TOTOLINK N200RE suffers from a buffer overflow vulnerability that originates from a stack-based buffer overflow in the main function of //cgi-bin/cstecgi.cgi. No detailed vulnerability details are provided at this time...

TOTOLINK A3300R Security Breach

The TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which is caused by a command injection vulnerability in the enable parameter of the setWiFiScheduleCfg method...

CVE-2024-1003

A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139B20201216. Affected by this issue is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be launched...

Tenda AC10 安全漏洞

Tenda AC10U is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC10U setSmartPowerManagement function, which is caused by a failure of the setSmartPowerManagement function to properly boundary check. An attacker can exploit this vulnerability to cause...

Tenda AC10 安全漏洞

Tenda AC10U is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC10U formSetDeviceName function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

Motorola MR2600 Command Injection Vulnerability

The Motorola MR2600 is a wireless router from Motorola, Inc. A security vulnerability exists in the Motorola MR2600 due to a command injection vulnerability in the "SaveSysLogParams" parameter...

D-Link DIR-882 sub_477AA0 Function Stack Buffer Overflow Vulnerability

The D-Link DIR-882 is a home wireless router that supports the latest IEEE802.11acWAVE2 wireless technology. The D-Link DIR-882 suffers from a stack buffer overflow vulnerability that stems from a buffer overflow issue in the sub477AA0 function. No detailed vulnerability details are provided at...

TOTOLINK T8 Information Disclosure Vulnerability

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics TOTOLINK. TOTOLINK T8 suffers from an information disclosure vulnerability, which originates from the parameter ssid/key in the file /cgi-bin/cstecgi.cgi is not sufficiently protected for sensitive information, and can be...