TrendNet TW100-S4W1CA 跨站脚本漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site scripting vulnerability exists in TrendNet TW100-S4W1CA version 2.3.32. The vulnerability can be exploited to inject arbitrary JavaScript into the router's web interface via the echo command...

TrendNet TW100-S4W1CA 跨站请求伪造漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

Moobot Milks Tenda Router Bugs for Propagation

A variant of the Mirai botnet called Moobot saw a big spike in activity recently, with researchers picking up widespread scanning in their telemetry for a known vulnerability in Tenda routers. It turns out that it was being pushed out from a new cyber-underground malware domain, known as Cyberium...

Weak password vulnerability in Youku Tudou Routerbot

Youku Tudou Routerbo is a smart router. A weak password vulnerability exists in Youku Tudou Routerbo, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Belkin Router

Belkin is a supplier to the accessories market for powering, protecting, manufacturing, connectivity, audio, security and home automation solutions for a wide range of consumer electronics and enterprise environments. An unauthorized access vulnerability exists in Belkin Router. An attacker could...

NETGEAR WNR3500L Router Has Weak Password Vulnerability

The NETGEAR WNR3500L router is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR3500L Router, which can be exploited by an attacker to compromise the device, obtain sensitive information and perform unauthorized operations...

Hongdian H8922 操作系统命令注入漏洞

The Hongdian H8922 is a router from the Chinese company Hongdian. Hongdian H8922 3.0.5 devices suffers from an operating system command injection vulnerability that can be exploited by an attacker to gain access via username guest and password guest...

ASUS GT-AC2900 授权问题漏洞

ASUS GT-AC2900 is a router from ASUS China.A security vulnerability exists in versions prior to ASUS GT-AC2900 devices 3.0.0.4.386.42643, which allows the administrator application to allow bypass of authentication when handling remote input from unauthenticated users, which could be exploited by...

Hongdian H8922 输入验证错误漏洞

The Hongdian H8922 is a router from the Chinese company Hongdian. A security vulnerability exists in the Hongdian H8922 3.0.5 devices that allows unprivileged users to read cli.conf with administrator password and other sensitive data via backup2.cgi...

Weak password vulnerability in D-Link DI-7300G and DI-7200G

The DI-7300G and DI-7200G are both D-Link router products. A weak password vulnerability exists in the D-Link DI-7300G and DI-7200G, which can be exploited by an attacker to obtain sensitive information...

CVE-2021-30231

The api/zrDm/setZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elinkprocenable parameter...

CVE-2021-30234

The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates in api/zrDm/setZRElink, that can be exploited by remote attackers to execute arbitrary commands via...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates from api/zrDm/setzrDm, that can be exploited by a remote attacker to execute arbitrary commands via...

Weak password vulnerability in H3C-ICG1800

H3C-ICG1800 is a router from Xinhua San Technology Co. The H3C-ICG1800 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Buffalo WSR-2533DHPL2 授权问题漏洞

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to an access control error that could be exploited by an attacker to gain access to unauthorized content...

CVE-2021-20712

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function...

The vulnerability of the DSL-320B-D1 router’s microprogramming software lies in the fact that the operation results are stored outside the buffer in memory, allowing an intruder to gain unauthorized access to the device with the user’s login credentials (login.xgi).

The vulnerability of the microprogrammed operating system of the DSL-320B-D1 router lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the device with user login...

Command Execution Vulnerability in NBR1000G of Riptide Networks Inc.

The NBR1000G is a router from Ruijie Networks Co. A command execution vulnerability exists in the NBR1000G from Riptide Networks Corporation, which can be exploited by an attacker to execute arbitrary commands...

TP-LINK TD-W8950N router suffers from weak password vulnerability

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-W8950N router, which can be exploited by an attacker to log in to the system backend and perform unauthorized operations...