D-Link DIR-615 Input Validation Error Vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to create a root admin user...

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software routers allows a hacker to execute arbitrary code.

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP...

The vulnerability of TP-Link M7350 router’s microprogramming software, related to the lack of data cleaning measures at the control level, allows attackers to execute arbitrary commands.

The vulnerability of TP-Link M7350 router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands until authentication is completed...

The vulnerability of the HTTP-server of the microprogramming-based VPN router TP-Link TL-R600VPN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the HTTP server of the microprogrammed VPN router TP-Link TL-R600VPN relates to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information ...

The vulnerability of the web interfaces of D-Link DIR-868L B1 and D-Link DIR-817LW A1 wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interfaces of D-Link DIR-868L B1 and D-Link DIR-817LW A1 wireless routers is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using value...

Arbitrary File Read Vulnerability in ZTE ZXR10 1800-2S Router

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. An arbitrary file read vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to access arbitrary files by sending a malicious request...

Arbitrary File Read Vulnerability in ZTE ZXR10 1800-2S Router (CNVD-2020-01284)

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. An arbitrary file read vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to access arbitrary files by sending a malicious request...

Denial of Service Vulnerability in ZTE ZXR10 1800-2S Routers

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. A denial of service vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to reboot the device and cause a denial of service...

Unauthorized Access Vulnerability in D-link DIR-629

AUO D-Link DIR-629 450M Wireless Router 3 High Power Blade Antenna Home Broadband Router. An unauthorized access vulnerability exists in the D-link DIR-629, which can be exploited by attackers to gain unauthorized access to sensitive information...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46615)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46633)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE MF910S Information Disclosure Vulnerability

The ZTE MF910S is a portable 4G wireless router from China's ZTE ZTE. An information disclosure vulnerability exists in the ZTE MF910S. The vulnerability stems from errors such as configuration during operation of a network system or product. An unauthorized attacker could exploit the vulnerabili...

CVE-2018-19031

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products 360 Safe Router P0,P1,P2,P3,P4, the affected version is V2.0.61.58897...

Weak Password Vulnerability in Huasan ER6300G2 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER6300G2 router, which can be exploited by an attacker to log into the router's backend...

D-Link DIR-865L Information Disclosure Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in the D-Link DIR-865L. The vulnerability stems from errors such as configuration during operation of a network system or product. An unauthorized attacker could exploit the...

Belkin Linksys EA6500 Path Traversal Vulnerability

The Belkin Linksys EA6500 is a wireless router from Belkin USA. A path traversal vulnerability exists in the Linksys EA6500, which arises from a failure of a network system or product to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to gai...

PT-2019-6976 · D Link · D-Link Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue concerns a PHP File Inclusion in the router's xml file. This affects the D-Link DIR-865L router. Recommendations: At the moment, there is no information about a newer...

NETGEAR JNR1010 Cross-Site Scripting Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in versions prior to NETGEAR JNR1010 1.0.0.32, which can be exploited by an attacker to execute client-side code...

ASUS RT-N10+ 2.0.3.4 CSRF / XSS / Command Execution

Exploit Title: XSS And CSRF to RCE in ASUS RT-N10 Repeater Mode Date: 13/10/2019 Exploit Author: Matheus Vrech Vendor Homepage: https://www.asus.com/ Version: ASUS RT-N10+, Firmware: 2.0.3.4 Tested on: Archlinux, Windows 10 XSS: when someone change router to repeater mode you should be able to...

Weak Password Vulnerability in Huasan ER5200 Router

ER5200 is a high-performance Gigabit downstream router from H3C, which is targeted at the SMB market for Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A weak password vulnerability exists in the H3C ER5200 router, which can b...