CVE-2021-27708

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system...

TP-Link Archer A7 AC1750 安全漏洞

Tp-link TP-Link Archer A7 AC1750 is a wireless router from China P&L Tp-link. A security vulnerability exists in the TP-Link Archer A7 AC1750 1.0.15, which originates from a vulnerability that allows an attacker to execute arbitrary code against the affected router...

Tenda G1 and G3 安全漏洞

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action IPMacBindIndex request...

Multilaser Router AC1200 跨站请求伪造漏洞

The Multilaser Router AC1200 is a router from Multilaser. The Multilaser Router AC1200 V02.03.01.45pt suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to enable remote access, change passwords, and perform other actions via misconfigured requests,...

TotoLink X5000R 操作系统命令注入漏洞

Totolink X5000R is a router from China's Gion Electronics Totolink. The TOTOLINK X5000R router suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute arbitrary operating system commands by sending a modified HTTP request...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 is a wireless AC750 dual-band router. A stack buffer overflow vulnerability exists in the handler function of /goform/addassignment in the D-Link DIR-816 A2 version 1.10 B05. An attacker can exploit the vulnerability by entering long text in the sip and smac fields to cause the...

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, and R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Code injection

In TP-Link TL-XDR3230 1.0.12, TL-XDR1850 1.0.9, TL-XDR1860 1.0.14, TL-XDR3250 1.0.2, TL-XDR6060 Turbo 1.1.8, TL-XDR5430 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This...

NEC Aterm WF1200C 安全漏洞

The NEC Aterm WF1200C is a wireless router from Nippon Electric NEC. A security vulnerability exists in Aterm WF1200CR: version 1.3.2, version 1.3.3, and version 1.5.1, which allows remote users to execute arbitrary shell commands on the target system...

CVE-2021-1459

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the...

D-Link DIR-878 Stack Buffer Overflow Vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...

Nokia G-120W-F 跨站脚本漏洞

The Nokia G-120W-F is a router from Nokia Finland. It provides network connectivity. A security vulnerability exists in Nokia G-120W-F that originates from XSS stored in the management interface via urlfilter.cgi...

Netgear NETGEAR R6400 and R6700 安全漏洞

The Netgear NETGEAR R6400 and NETGEAR R6700 are both wireless routers from Netgear, Inc. A security vulnerability exists in the NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers, which can be exploited by an attacker to execute arbitrary code on the router, and does not require...

Weak password vulnerability in H3C ER6300 routers

ER6300 is a high-performance full gigabit router for Internet cafes from H3C. A weak password vulnerability exists in the H3C ER6300 router, which can be exploited by an attacker to log in to the router's backend to obtain sensitive information...

NETGEAR 多款产品缓冲区错误漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A buffer error vulnerability exists in several NETGEAR products. An authenticated attacker could exploit the vulnerability to cause a...

Netgear NETGEAR RBR850 授权问题漏洞

The Netgear NETGEAR RBR850 is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in the NETGEAR RBR850 devices before 3.2.10.11, which originates from authentication bypass...

The vulnerability of the web portal of D-Link DSL-2888A microprogramming software for routers allows a hacker to exploit it to increase their privileges.

The vulnerability of the D-Link DSL-2888A router’s microprogramming software web portal is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Linksys Smart Wi-Fi routers suffer from weak password vulnerability

Smart Wi-Fi is a router product from Linksys. Linksys Smart Wi-Fi routers have a weak password vulnerability that can be exploited by an attacker to directly log in to the router's management backend to control the device...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11338)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded trueadmin/admintrue credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11340)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded admin/3UJUh2VemEfUtesEchEC2d2e credentials against an ISP. No detailed vulnerability details are provided at...