Lucene search
+L

2282 matches found

CNNVD
CNNVD
added 2022/03/18 12:0 a.m.5 views

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to cause arbitrary command execution...

10CVSS6AI score0.01665EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/18 12:0 a.m.6 views

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

10CVSS6AI score0.01665EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.6 views

WAVLINK AC1200 访问控制错误漏洞

WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...

9.8CVSS5.7AI score0.01928EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.4 views

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS6.1AI score0.02932EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.5 views

多款TotoLink产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.0224EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.4 views

ARRIS TR3300 命令注入漏洞

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS, Inc. ARRIS TR3300 v1.0.13 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute arbitrary commands via crafted requests...

10CVSS6.2AI score0.0612EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.11 views

多款TotoLink产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.05748EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.7 views

TotoLink X5000R和TotoLink A7000R 操作系统命令注入漏洞

Totolink X5000R is a router from Totolink, China.TotoLink A7000R is a wireless router from TotoLink, China.Totolink routers X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115 B20201022 contain a security vulnerability that could be exploited by attackers to execute arbitrary commands via crafte...

9.8CVSS6AI score0.02932EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.4 views

ARRIS SBR-AC1900P和ARRIS SBR-AC3200P 操作系统命令注入漏洞

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS USA. Multiple ARRIS products command injection vulnerability, which stems from the firewall local logging feature failing to properly filter constructed command special characters, commands, etc. An attacker could exploit...

9.8CVSS5.9AI score0.02901EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.9 views

ARRIS TR3300 命令注入漏洞

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the pppoeusername, pppoepasswd, and pppoeservicename parameters in the pppoe function failing to properly filter the construct command special characters, commands...

10CVSS5.9AI score0.02878EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.14 views

The vulnerability of NETGEAR D7000 router’s built-in software arises from buffer overflows in the stack, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of NETGEAR D7000 router’s built-in software arises from buffer overflow on the stack. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.8CVSS8AI score0.00461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.8 views

The vulnerability of NETGEAR RAX43 router’s built-in software arises from buffer overflow attacks, which allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of NETGEAR RAX43 router’s built-in software is caused by buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.8CVSS8.1AI score0.02195EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:47 p.m.2 views

CVE-2022-25554

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceId parameter...

7.8CVSS5.5AI score0.01219EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.5 views

Tenda AX1806 缓冲区错误漏洞

Tenda AX1806 is a WiFi6 wireless router from Tenda, China. Tenda AX1806 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the ddnsUser parameter...

7.8CVSS5.7AI score0.12269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.6 views

TP-LINK WR-886N 安全漏洞

A buffer overflow vulnerability exists in TP-LINK TL-WR886N 20190826 version 2.3.8, which originates from the /cloudconfig/routerpost/getresetpwd veirfycode function does not properly validate data boundaries when performing operations on memory, and an authenticated attacker can use this...

10CVSS6.6AI score0.02413EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.8 views

Tenda AX1806缓冲区错误漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 formSetSysToolDDNS function suffers from a stack overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS via the ddnsEn parameter...

7.8CVSS5.8AI score0.01219EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/04 2:15 p.m.17 views

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

9.8CVSS0.02738EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.16 views

The vulnerability of NETGEAR R6400 router’s built-in software, related to improper code generation, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of NETGEAR R6400 router’s built-in software is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to compromise the integrity and accessibility of the protected information...

6.9CVSS6.8AI score0.0044EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.12 views

The vulnerability of NETGEAR RAX200 router’s built-in software, related to code errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR RAX200 router’s built-in software is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.01286EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/25 8:15 p.m.8 views

CVE-2022-25060

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...

9.8CVSS5.8AI score0.39888EPSS
SaveExploits1References3
Rows per page
Query Builder