Tenda AC10 缓冲区错误漏洞

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn, which originates from a stack overflow contained in the parameters list and bindnum in /goform/SetIpMacBind...

PT-2023-5303 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the DDP service, resulti...

CVE-2020-22181

A reflected cross site scripting XSS vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi...

CVE-2023-39748

An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service DoS via a crafted GET request...

PT-2023-27105

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06 Description A stack overflow issue was discovered via the list parameter in the set qosMib list function. This issue affects the Tenda AC8V4 router. Recommendations For Tenda AC8V4 version 16.03.34.06, consider...

RG-EW Series Routers 命令注入漏洞

The Ruijie RG-EW Series Routers is a router from China's Ruijie Networks Ruijie. A security vulnerability exists in RG-EW Series Routers that could allow a remote attacker to execute arbitrary code...

COMFAST CF-XR11 命令注入漏洞

COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version 2.7.2, which stems from a command injection vulnerability detected at function sub415588...

The vulnerability of the get_parentControl_list_Info function in the Tenda AC8 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the getparentControllistInfo function in the Tenda AC8 router’s microprogramming software is related to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Tenda AC7 Buffer Error Vulnerability

Tenda AC7 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC7 V1.0, V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0, V15.03.06.28, AC9 V3.0, V15.03.06.42multi, and FH1205 V2.0.0.7775, which originates from The vulnerability is caused by a stack overflow in the deviceId...

Tenda F1203 Buffer Error Vulnerability

Tenda F1203 is a wireless router from Tenda China. A security vulnerability exists in the Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6, and FH1205 V2.0.0.7775 versions, which stems from a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function...

PT-2023-9252 · Actiontec · Actiontec Wcb6200Q

Name of the Vulnerable Software and Affected Versions: Actiontec WCB6200Q affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. The flaw exists within the HTTP server, where a...

PT-2023-9251 · Actiontec · Actiontec Wcb6200Q

Name of the Vulnerable Software and Affected Versions: Actiontec WCB6200Q affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. The specific flaw exists within the HTTP server,...

The vulnerability of the microprogramming software of the Link DIR-885L, which allows a hacker to increase their privileges

The vulnerability of the Link DIR-885L router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

The vulnerability of the phpcgi_main function in the D-Link DIR-859 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-859 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

PT-2023-4143 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U affected versions not specified Description: The issue is related to an error in the do json decode function of the ej.c file in the ASUS RT-AX88U router's firmware, which can cause a buffer overflow. A remote attacker can explo...

D-Link DIR-859 安全漏洞

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

D-LINK DIR-815 安全漏洞

The D-Link DIR-815 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-LINK DIR-815 v1.01, which stems from the discovery of a contained buffer overflow vulnerability via component /web/captcha.cgi...

The vulnerability of D-Link DSL-224 router microprogramming software, related to insufficient limits on authentication attempts, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of D-Link DSL-224 router microprogramming software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

TOTOLINK A3300R 操作系统命令注入漏洞

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. A command injection vulnerability exists in the TOTOLINK A3300R. The vulnerability stems from the command parameter of the setTracerouteCfg method...

Nexxt Nebula 1200-AC 安全漏洞

The Nexxt Nebula 1200-AC is a wireless router from Nexxt USA. A security vulnerability exists in the Nexxt Nebula 1200-AC version 15.03.06.60, which originates from using the HTTPD service to enable TELNET to bypass authentication and command execution...