Denial of Service Vulnerability in AIFUL Router iK-Q80

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. Denial of service vulnerability exists ...

Denial of Service Vulnerability in Netgear AC1750 R6400v2

The Netgear AC1750 R6400v2 is a Wi-Fi router. A denial of service vulnerability exists in the Netgear AC1750 R6400v2. An attacker can exploit the vulnerability to cause a denial of service on the target router and its upper tier operator's router by sending a carefully constructed packet to a...

NETGEAR R7800 Buffer Overflow Vulnerability

The NETGEAR R7800 is an AC2600 dual-band Gigabit wireless router. A buffer overflow vulnerability exists in the NETGEAR R7800 versions prior to 1.0.2.74. No details of the vulnerability are provided at this time...

Multiple Tp-Link Router Products Information Disclosure Vulnerability

Tp-link TP-Link TL-WR940N and so on are the products of China P&L Tp-link company.TP-Link TL-WR940N is a wireless router.TP-Link WR1043nd is a wireless router.TP-Link TL-WR841N is a wireless router.TP-Link TL-WR740N is a wireless router. WR740N is a wireless router.Tp-Link MR3420 and so on are...

CVE-2020-29669

In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...

TotoLink A3002RU 命令注入漏洞

Totolink TOTOLINK A3002RU is a wireless router product from Totolink Taiwan, China. A command injection vulnerability exists in the TOTOLINK A3002RU-V2.0.0 B20190814.1034, which could allow a remote, authenticated user to modify the system's "run command". An attacker can use this vulnerability t...

CVE-2020-13620

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

Fastweb FASTGate 跨站请求伪造漏洞

Fastweb FASTGate is a modem from Fastweb Italy. A cross-site request forgery vulnerability exists in Fastweb FASTGate GPON FGA2130FWB version 2020-05-26 and prior versions that allows CSRF to manage web panels through the router, which could be exploited by an attacker to be able to perform...

Command Injection Vulnerability in Huawei HG532 Router

Huawei HG532 router is a wireless router product for home and small office users. A command injection vulnerability exists in the Huawei HG532 Router. An attacker can exploit this vulnerability to gain control of the server...

HUAWEI ws5800-10 Data Forgery Issue Vulnerability

The Huawei ws5800-10 is a wireless router from Huawei China. A security vulnerability exists in some Huawei home routers. The vulnerability stems from improper validation of specific messages, which can be exploited by an attacker to cause specific functionality anomalies...

Weak Password Vulnerability in Asus Computer Incorporated RT-N10E B1

Offering easy CD-ROM-free installation and stable data transfer rates, the RT-N10E B1 is a basic solution for wireless network setup. A weak password vulnerability exists in the Asus Computer Incorporated RT-N10E B1. The vulnerability can be exploited by an attacker to log into the router's backe...

Genexis Platinum-4410 Cross-Site Scripting Vulnerability

The Genexis Platinum-4410 is a wireless router from Genexis UK. The Genexis Platinum-4410 P4410-V2-1.28 device suffers from a cross-site scripting vulnerability that can be exploited by an attacker to perform malicious actions, where an XSS pop-up will affect all privileged users...

The vulnerability of the set_WAN6 interface in Xiaomi R3600 router software allows a attacker to execute arbitrary code on the target system.

The vulnerability of the setWAN6 interface in Xiaomi R3600 router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system by sending specially crafted network packets...

The vulnerability of the IPv6 traffic processing service of Cisco Small Business 250 Series, Cisco Small Business 350 Series, Cisco Small Business 350X Series, and Cisco Small Business 550X Series routers allows a attacker to cause a service failure.

The vulnerability of the IPv6 traffic processing service of Cisco Small Business 250 Series, Cisco Small Business 350 Series, Cisco Small Business 350X Series, and Cisco Small Business 550X Series routers is related to IPv6 traffic processing errors. Exploiting this vulnerability can allow a...

CVE-2020-12127

WAVLINK WN530H4 M30H4.V5030.190403 is affected by CVE-2020-12127, a information-disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint. The issue allows an unauthenticated attacker to leak router settings, including cleartext login credentials and DNS/configuration data. Multiple ...

The vulnerability of JunOS’s EX Series and QFX Series routers allows attackers to elevate their privileges to the root level.

The vulnerability of JunOS’s EX Series and QFX Series routers lies in their authentication deficiencies. Exploiting this vulnerability can allow attackers to gain privileges to the root level...

Excitel HGW RL821GWV-D suffers from an information disclosure vulnerability

The HGW RL821GWV-D is a router. The Excitel HGW RL821GWV-D has an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2020-25015

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password...

CVE-2018-20432

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration...

ZTE Router F602W Information Disclosure Vulnerability

ZTE Router is a wireless router device from ZTE. An information disclosure vulnerability exists in the ZTE Router F602W product, which originates from errors such as configuration during operation of the network system or product. An unauthorized attacker can exploit the vulnerability to obtain...