CVE-2022-24354

The CVE-2022-24354 entry concerns TP-Link AC1750 routers. The vulnerability stems from the NetUSB.ko module, where improper validation of user-supplied data can cause an integer overflow during buffer allocation, enabling network-adjacent attackers to execute code with root privileges. Auth is no...

CVE-2021-45401

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function...

CVE-2021-46314

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

The vulnerability of the `version_upgrade.asp` implementation in the D-Link DI-7200G V2.E1 microprogramming router software allows a hacker to execute arbitrary commands.

The vulnerability of the versionupgrade.asp implementation in the D-Link DI-7200G V2.E1 microprogramming router software is related to insufficient cleaning of input data during the processing of the path parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of D-Link DIR-882 wireless routers’ microprogramming software lies in the improper handling of the LocalIPAddress parameter, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-882 wireless routers’ microprogramming software is related to incorrect processing of the LocalIPAddress parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted HNAP1 POST requests...

The vulnerability of the httpddebug.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the httpddebug.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the urlrd_opt.asp implementation in D-Link DI-7200G V2.E1 microprogrammed router software allows a hacker to execute arbitrary commands.

The vulnerability of the urlrdopt.asp implementation in the microprogramming software for D-Link DI-7200G V2.E1 routers is related to insufficient cleaning of input data during the processing of the urlen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the implementation of the SetNetworkTomographySettings() function in the microprogrammed software for D-Link DIR-823-Pro wireless routers allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetNetworkTomographySettings function in the microprogrammed wireless router software from D-Link DIR-823-Pro relates to insufficient cleaning of input data during the processing of parameters tomographypingaddress, tomographypingnumber,...

The vulnerability of the msp_info.htm file implementation in D-Link DI-7200G V2.E1 microprogrammable router software allows a hacker to execute arbitrary commands.

The vulnerability of the mspinfo.htm file implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the cmd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotel...

Tp-link TP-Link TL-WR940N 安全漏洞

Tp-link TP-Link TL-WR940N is a wireless router from China P&L Tp-link. The TP-Link TL-WR940N suffers from a buffer overflow vulnerability that stems from a lack of proper validation of the length of user-supplied data before copying it into a fixed-length stack-based buffer. An attacker could...

CVE-2021-44864

TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userRpm/PingIframeRpm.htm request which contains redundant & in parameter...

CVE-2021-44864

TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userRpm/PingIframeRpm.htm request which contains redundant & in parameter...

ELECOM lan 安全漏洞

ELECOM lan is a router from ELECOM Japan. A security vulnerability exists in ELECOM LAN routers that stems from a hidden function vulnerability in ELECOM LAN routers. The vulnerability can be exploited by an attacker to execute arbitrary operating system commands over an unspecified vector on a...

CVE-2022-24143

Tenda AX3 v16.03.12.10CN and AX12 22.03.01.2CN was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the timeZone parameter...

D-Link Dir-823-Pro 命令注入漏洞

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

TotoLink X5000R 命令注入漏洞

Totolink X5000R is a router from China's Gion Electronics Totolink. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands by parameterizing the host time...

D-Link DIR-878 命令注入漏洞

D-Link DIR-878 is a wireless router from D-Link Taiwan, China. The D-Link DIR-878 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

D-Link Di-7200G 命令注入漏洞

D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200G V2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the path parameter...

Tenda G1 and G3 缓冲区错误漏洞

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3 that can be exploited by an attacker to cause a denial of service via the qvlanName parameter...

Totolink X5000R 缓冲区错误漏洞

TOTOLINK X5000R is a router.TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to buffer error, which can be exploited by attackers to cause a denial of service DoS via eip, sip, and server parameters...