CVE-2023-33538

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface for managing microprogrammed software routers from Cisco Small Business, models RV016, RV042, RV042G, RV082, RV320, and RV325, is related to insufficient validation of input data during HTTP packet processing. Exploiting this vulnerability allows a malicious...

The vulnerability of D-Link DIR-601 router’s microprogramming software allows a hacker to circumvent existing security restrictions.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the hedwig.cgi and pigwidgeon.cgi components of the D-Link DIR-868L router’s software allows a attacker to perform a CSRF attack.

The vulnerability of the hedwig.cgi and pigwidgeon.cgi components of the D-Link DIR-868L router software is related to the manipulation of inter-domain requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

TOTOLINK A7100RU 命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A7100RU version V7.4cu.2313B20191024, which stems from the presence of a command injection vulnerability...

TOTOLINK X5000R 命令注入漏洞

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the presence of a command injection vulnerability...

CVE-2023-33671

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function...

The vulnerability of Cisco SD-WAN vEdge router microprogramming software, related to the execution of operations outside the buffer in memory, allows a attacker to cause service failure.

The vulnerability of Cisco SD-WAN vEdge microprogramming software relates to the execution of operations outside the buffer in memory when handling traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Hitron Technologies CODA 操作系统命令注入漏洞

Hitron Technologies CODA-5310 is a wireless router. The Hitron Technologies CODA-5310 suffers from a remote command execution vulnerability that can be exploited by an attacker to perform a command injection attack using the administration page to execute arbitrary system commands, manipulate the...

The vulnerability of D-Link DIR-601 router’s microprogramming software, which involves transmitting critical information in plaintext, allows attackers to enhance their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to the transmission of critical information in plaintext. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the UpdateWanParams interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer...

H3C Magic R300-2100M 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the DeltriggerList interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overfl...

H3C Magic R300-2100M 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in H3C Magic R300-2100M V100R004 version, which stems from the presence of a stack overflow...

The vulnerability of the microprogramming software of the Parks Fiberlink 210 exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands, allowing attackers to execute arbitrary commands on the server.

The vulnerability of the Parks Fiberlink 210 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the server using t...

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 router microprogramming systems exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

The vulnerability of the /goform/formLogin component in the D-Link DIR-816 A2 microprogramming router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogrammed software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the /goform/sylogapply component in the D-Link DIR-816 A2 router’s microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/sylogapply component in the D-Link DIR-816 A2 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

Remote code execution

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

Tenda AC5 安全漏洞

Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this...