CVE-2020-10930

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...

D-Link DIR-816L Cross-Site Scripting Vulnerability

The D-Link DIR-816L is a wireless AC750 dual-band cloud router. A cross-site scripting vulnerability exists in the D-Link DIR-816L. The vulnerability stems from the webinc/js/info.php file printing the RESULT parameter on a web page without applying any output filter. An attacker can exploit this...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, Cisco Small Business RV130, Cisco Small Business RV130W, and Cisco Small Business RV215W allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the web-based management interface for Cisco Small Business RV110W, Cisco Small Business RV130, Cisco Small Business RV130W, and Cisco Small Business RV215W lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a perpetrator to execute arbitrary commands.

The vulnerability of the web-based management interfaces for Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 is related to the lack of measures for input data cleansing. Exploiting this vulnerability...

The vulnerability of the adv_gzone.php component in the D-Link DIR-865L router’s microprogramming software allows a hacker to obtain the password used for the guest network.

The vulnerability of the advgzone.php component in the D-Link DIR-865L router’s microprogramming software is related to the use of Wired Equivalent Privacy WEP encryption. Exploiting this vulnerability allows a malicious actor to obtain the password used for the guest network...

The vulnerability of the get_random_string function in D-Link DIR-865L router software allows a hacker to disclose protected information.

The vulnerability of the getrandomstring function in D-Link DIR-865L router software is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this function...

This Week in Security News: Intel Says ‘Tiger Lake’ Will Drown Control-Flow Malware and New Phishing Campaign Targeting Office 365 Exploits Brand Names

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how the next generation of Intel mobile processors will include malware protection built into the chip. Also, read about a new...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31397)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'speeddir' parameter to the /goform/SetSpeedWan URL...

Unauthorized Access Vulnerability in RG-RSR20-14E Router

The RG-RSR20-14E is a multi-service router. An unauthorized access vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker to remove or modify the administrator user password...

Logic Flaw Vulnerability in RG-RSR20-14E Router

The RG-RSR20-14E is a multi-service router. A logic flaw vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker for elevation of privilege...

File Upload Vulnerability in RG-RSR20-14E Router

The RG-RSR20-14E is a multi-service router. A file upload vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker to upload a forged log file, among other things...

Command Execution Vulnerability in TOTOLINK T10 Router

China Unicom Hong Kong Technology Limited is a manufacturer of network communication products. A command execution vulnerability exists in the TOTOLINK T10 router, which can be exploited by attackers to execute arbitrary commands...

Command Execution Vulnerability in TOTOLINK A950RG Router

China Unicom Hong Kong Technology Limited is a manufacturer of network communication products. A command execution vulnerability exists in the TOTOLINK A950RG router, which can be exploited by attackers to execute arbitrary commands...

NETGEAR R7800 Command Injection Vulnerability (CNVD-2020-25353)

The R7800 is a router from NETGEAR. The NETGEAR R7800 has a security vulnerability that can be exploited by attackers to compromise confidentiality, integrity, and availability...

Buffer overflow vulnerability in AC9V3.0 upgrade software of Shenzhen Jixiang Tengda Technology Co.(CNVD-2020-29379)

AC9V3.0 upgrade software is a Gigabit Ethernet port wireless router from Shenzhen Jixiang Tengda Technology Co. Ltd. AC9V3.0 upgrade software has a buffer overflow vulnerability, which can be exploited by an attacker to cause a denial of service overwrite the return value of a function, and the...

Unspecified Vulnerability in NETGEAR R6220

The NETGEAR R6220 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R6220 versions prior to 1.1.0.60. No detailed vulnerability details are available at this time...

NETGEAR R7800 Command Injection Vulnerability (CNVD-2020-25359)

The NETGEAR R7800 is a router from NETGEAR. The NETGEAR R7800 suffers from a command injection vulnerability that can be exploited by an attacker to compromise confidentiality, integrity, and availability...

NETGEAR R7800 Command Injection Vulnerability (CNVD-2020-25364)

The NETGEAR R7800 is a router from NETGEAR. The NETGEAR R7800 suffers from a command injection vulnerability that can be exploited by an attacker to compromise confidentiality, integrity, and availability...

CVE-2019-20764

NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user...

The vulnerability of Huawei’s microprogrammed router software, related to resource exhaustion, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to cause service failures...