The vulnerability of JunOS’s EX Series and QFX Series routers allows attackers to elevate their privileges to the root level.

The vulnerability of JunOS’s EX Series and QFX Series routers lies in their authentication deficiencies. Exploiting this vulnerability can allow attackers to gain privileges to the root level...

Excitel HGW RL821GWV-D suffers from an information disclosure vulnerability

The HGW RL821GWV-D is a router. The Excitel HGW RL821GWV-D has an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2020-25015

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password...

CVE-2018-20432

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration...

ZTE Router F602W Information Disclosure Vulnerability

ZTE Router is a wireless router device from ZTE. An information disclosure vulnerability exists in the ZTE Router F602W product, which originates from errors such as configuration during operation of the network system or product. An unauthorized attacker can exploit the vulnerability to obtain...

CVE-2020-10930

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...

D-Link DIR-816L Cross-Site Scripting Vulnerability

The D-Link DIR-816L is a wireless AC750 dual-band cloud router. A cross-site scripting vulnerability exists in the D-Link DIR-816L. The vulnerability stems from the webinc/js/info.php file printing the RESULT parameter on a web page without applying any output filter. An attacker can exploit this...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, Cisco Small Business RV130, Cisco Small Business RV130W, and Cisco Small Business RV215W allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the web-based management interface for Cisco Small Business RV110W, Cisco Small Business RV130, Cisco Small Business RV130W, and Cisco Small Business RV215W lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a perpetrator to execute arbitrary commands.

The vulnerability of the web-based management interfaces for Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 is related to the lack of measures for input data cleansing. Exploiting this vulnerability...

The vulnerability of the adv_gzone.php component in the D-Link DIR-865L router’s microprogramming software allows a hacker to obtain the password used for the guest network.

The vulnerability of the advgzone.php component in the D-Link DIR-865L router’s microprogramming software is related to the use of Wired Equivalent Privacy WEP encryption. Exploiting this vulnerability allows a malicious actor to obtain the password used for the guest network...

The vulnerability of the get_random_string function in D-Link DIR-865L router software allows a hacker to disclose protected information.

The vulnerability of the getrandomstring function in D-Link DIR-865L router software is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this function...

This Week in Security News: Intel Says ‘Tiger Lake’ Will Drown Control-Flow Malware and New Phishing Campaign Targeting Office 365 Exploits Brand Names

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how the next generation of Intel mobile processors will include malware protection built into the chip. Also, read about a new...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31397)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'speeddir' parameter to the /goform/SetSpeedWan URL...

Logic Flaw Vulnerability in RG-RSR20-14E Router

The RG-RSR20-14E is a multi-service router. A logic flaw vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker for elevation of privilege...

File Upload Vulnerability in RG-RSR20-14E Router

The RG-RSR20-14E is a multi-service router. A file upload vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker to upload a forged log file, among other things...

Unauthorized Access Vulnerability in RG-RSR20-14E Router

The RG-RSR20-14E is a multi-service router. An unauthorized access vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker to remove or modify the administrator user password...

Command Execution Vulnerability in TOTOLINK T10 Router

China Unicom Hong Kong Technology Limited is a manufacturer of network communication products. A command execution vulnerability exists in the TOTOLINK T10 router, which can be exploited by attackers to execute arbitrary commands...

Command Execution Vulnerability in TOTOLINK A950RG Router

China Unicom Hong Kong Technology Limited is a manufacturer of network communication products. A command execution vulnerability exists in the TOTOLINK A950RG router, which can be exploited by attackers to execute arbitrary commands...

Buffer overflow vulnerability in AC9V3.0 upgrade software of Shenzhen Jixiang Tengda Technology Co.(CNVD-2020-29379)

AC9V3.0 upgrade software is a Gigabit Ethernet port wireless router from Shenzhen Jixiang Tengda Technology Co. Ltd. AC9V3.0 upgrade software has a buffer overflow vulnerability, which can be exploited by an attacker to cause a denial of service overwrite the return value of a function, and the...

NETGEAR R7800 Command Injection Vulnerability (CNVD-2020-25353)

The R7800 is a router from NETGEAR. The NETGEAR R7800 has a security vulnerability that can be exploited by attackers to compromise confidentiality, integrity, and availability...