The vulnerability of the cstecgi.cgi implementation in TOTOLINK X5000R router microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the cstecgi.cgi microprogramming system implementation in TOTOLINK X5000R routers is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

GL.iNet GL-AR300M Security Vulnerability

The GL.iNet GL-AR300M is a modern mini smart router from China's GL.iNet. A security vulnerability exists in GL.iNet GL-AR300M v4.3.7, which stems from a command injection vulnerability. The vulnerability can be exploited to inject arbitrary shell commands via the package information function...

CVE-2023-49418

TOTOLink A7000R V9.1.0u.6115B20201022has a stack overflow vulnerability via setIpPortFilterRules...

The vulnerability of the Traffic Analyzer – Statistical function in the microprogramming software for Wi-Fi routers from ASUS’ RT-AC86U allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the Traffic Analyzer – Statistical function in ASUS’ Wi-Fi router software, the RT-AC86U, exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands or cause service...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the formAdvancedSetListSet function to correctly validate the length of the input data, and can be exploited by a remote...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the formDeleteMeshNode function to correctly validate the length of the input data, and can be exploited by a remote attacker...

The vulnerability of the sub_48AF78 function in D-Link DIR878 router microprogramming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the sub48AF78 function in D-Link DIR878 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the sub_4119A0 function in the microprogramming software of the TOTOLINK X6000R router allows a hacker to execute arbitrary code.

The vulnerability of the sub4119A0 function shttpd in the TOTOLINK X6000R router’s microprogramming system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-48842

D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...

D-Link Go-RT-AC750 安全漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China's AUO D-Link. A command injection vulnerability exists in the D-Link Go-RT-AC750 revAv101b03 version, which stems from the service parameter of hedwig.cgi failing to correctly filter the construct command special characters,...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a command execution vulnerability that stems from the sub415534 function failing to properly filter construct command special characters, commands, etc. An attacker can exploit this...

GL.iNet AX1800 Security Vulnerability

The GL.iNet AX1800 is a wireless router from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in the GL.iNet AX1800 that stems from a vulnerability that allows an attacker to execute arbitrary code with the specially crafted GLnassys authentication function...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. TOTOLINK X6000R suffers from a command execution vulnerability, which originates from the sub4119A0 function's stunuser parameter failing t...

The vulnerability of AiProtection function in the microprogramming software of ASUS’ Wi-Fi routers like ASUS RT-AC86U allows a hacker to execute arbitrary code.

The vulnerability of AiProtection function in ASUS RT-AC86U Wi-Fi routers lies in the possibility of executing commands remotely. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Tenda AC10 安全漏洞

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the shareSpeed parameter of the fromSetWifiGuestBasic function failing to correctly validate the length and size of the input data, which can be...

VulnCheck KEV: CVE-2023-20073

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

The vulnerability of the Wi-Fi router software of Zyxel NBG7510, related to access control deficiencies, allows a intruder to gain access to the DNS server.

The vulnerability of the Zyxel NBG7510 Wi-Fi router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to gain access to the DNS server...

Tenda AX1806 Security Vulnerability

Tenda AX1806 is a WiFi6 wireless router from Tenda, China. A security vulnerability exists in Tenda AX1806 version V1.0.0.1, which originates from a stack overflow vulnerability in function sub455D4...

The vulnerability of the getRegVeriRegister() function in TP-LINK’s router software TL-WR886N allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the getRegVeriRegister function in TP-LINK’s TL-WR886N router software lies in the fact that the operation is performed outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity, availability, and confidentiality of the...

The vulnerability of the deviceInfoJsonToBinc function in TP-Link’s router software allows a hacker to execute arbitrary code.

The vulnerability of the deviceInfoJsonToBinc function in TP-Link’s router software, the TL-WDR7660, relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...