Hongdian H8922 操作系统命令注入漏洞

The Hongdian H8922 is a router from the Chinese company Hongdian. Hongdian H8922 3.0.5 devices suffers from an operating system command injection vulnerability that can be exploited by an attacker to gain access via username guest and password guest...

Weak password vulnerability in D-Link DI-7300G and DI-7200G

The DI-7300G and DI-7200G are both D-Link router products. A weak password vulnerability exists in the D-Link DI-7300G and DI-7200G, which can be exploited by an attacker to obtain sensitive information...

CVE-2021-30234

The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...

CVE-2021-30231

The api/zrDm/setZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elinkprocenable parameter...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates from api/zrDm/setzrDm, that can be exploited by a remote attacker to execute arbitrary commands via...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates in api/zrDm/setZRElink, that can be exploited by remote attackers to execute arbitrary commands via...

Weak password vulnerability in H3C-ICG1800

H3C-ICG1800 is a router from Xinhua San Technology Co. The H3C-ICG1800 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Buffalo WSR-2533DHPL2 授权问题漏洞

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to an access control error that could be exploited by an attacker to gain access to unauthorized content...

CVE-2021-20712

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function...

The vulnerability of the DSL-320B-D1 router’s microprogramming software lies in the fact that the operation results are stored outside the buffer in memory, allowing an intruder to gain unauthorized access to the device with the user’s login credentials (login.xgi).

The vulnerability of the microprogrammed operating system of the DSL-320B-D1 router lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the device with user login...

Command Execution Vulnerability in NBR1000G of Riptide Networks Inc.

The NBR1000G is a router from Ruijie Networks Co. A command execution vulnerability exists in the NBR1000G from Riptide Networks Corporation, which can be exploited by an attacker to execute arbitrary commands...

TP-LINK TD-W8950N router suffers from weak password vulnerability

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-W8950N router, which can be exploited by an attacker to log in to the system backend and perform unauthorized operations...

CVE-2021-27708

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 is a wireless AC750 dual-band router. A stack buffer overflow vulnerability exists in the handler function of /goform/addassignment in the D-Link DIR-816 A2 version 1.10 B05. An attacker can exploit the vulnerability by entering long text in the sip and smac fields to cause the...

TP-Link Archer A7 AC1750 安全漏洞

Tp-link TP-Link Archer A7 AC1750 is a wireless router from China P&L Tp-link. A security vulnerability exists in the TP-Link Archer A7 AC1750 1.0.15, which originates from a vulnerability that allows an attacker to execute arbitrary code against the affected router...

Multilaser Router AC1200 跨站请求伪造漏洞

The Multilaser Router AC1200 is a router from Multilaser. The Multilaser Router AC1200 V02.03.01.45pt suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to enable remote access, change passwords, and perform other actions via misconfigured requests,...

Tenda G1 and G3 安全漏洞

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action IPMacBindIndex request...

TotoLink X5000R 操作系统命令注入漏洞

Totolink X5000R is a router from China's Gion Electronics Totolink. The TOTOLINK X5000R router suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute arbitrary operating system commands by sending a modified HTTP request...

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, and R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Code injection

In TP-Link TL-XDR3230 1.0.12, TL-XDR1850 1.0.9, TL-XDR1860 1.0.14, TL-XDR3250 1.0.2, TL-XDR6060 Turbo 1.1.8, TL-XDR5430 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This...