The vulnerability of Huawei’s microprogrammed router software, related to reading data beyond the buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Huawei’s microprogrammed router software, related to the re-release of memory, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to the repeated release of memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2020-10886

The CVE affects TP-Link Archer A7 AC1750 routers (Firmware 190726) and a component called tmpServer that listens on TCP port 20002. The root cause is improper validation of a user-supplied string before it is used to execute a system call, enabling remote attackers to execute arbitrary code with ...

The vulnerability of the microprogrammed software of D-Link DAP-2610 wireless routers allows a hacker to execute arbitrary code with root privileges.

The vulnerability of D-Link DAP-2610 wireless router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges...

PT-2020-6515 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this issue. The specific fla...

Command Execution Vulnerability in RG-RSR20-14E

The RG-RSR20-14E is a multi-service router. A command execution vulnerability exists in the RG-RSR20-14E. An attacker can exploit this vulnerability to execute arbitrary commands, such as rebooting the router, and thus obtain server administrative privileges...

Flying FishStar Internet Behavior Management Router Has Weak Password Vulnerability

Chengdu Flying Fish Star Technology Co., Ltd. is a value-added service company that serves enterprise, business and home users with smart and easy-to-use network communication management devices and innovative technologies. A weak password vulnerability exists in Flyingfish Star Internet Behavior...

This Week in Security News: 10,000 Users Affected by Leak from Misconfigured AWS Cloud Storage and Massive U.S. Property and Demographic Database Exposes 200 Million Records

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how the data of train commuters in the U.K. who were using the free Wi-Fi in Network Rail-managed stations was unintentionally...

CVE-2020-8861

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

Remote Command Execution Vulnerability in D-link DIR-823G Router

The D-Link DIR-823G is a wireless router. A remote command execution vulnerability exists in the D-link DIR-823G router. An attacker can exploit this vulnerability to execute arbitrary system commands...

CVE-2013-3067

Linksys WRT310Nv2 2.0.0.1 is vulnerable to XSS...

CVE-2019-19823

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4....

The vulnerability of Cisco RV320 and Cisco RV325 microprogrammed software lies in the presence of a hard-coded pair of open/closed key H.509 certificates and a static SSH host key, which allows an attacker to elevate their privileges.

The vulnerability of Cisco RV320 and Cisco RV325 router microprogramming software is related to the presence of a tightly encrypted pair of open/closed keys H.509 certificate and a static SSH host key. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...

D-Link DIR-859 Arbitrary Code Execution Vulnerability

The D-Link DIR-859 is a popular router device. A security vulnerability exists in the D-Link DIR-859, which can be exploited by a remote attacker to submit a special request that can be executed in the application context to execute arbitrary code...

D-Link DIR-601 Cross-Site Request Forgery Vulnerability

The D-Link DIR-601 B1 is a wireless router from AUO D-Link of Taiwan, China. A cross-site request forgery vulnerability exists in the D-Link DIR-601 B1 version 2.00NA. The vulnerability stems from a WEB application that does not adequately verify that a request is from a trusted user. An attacker...

The vulnerability of the HTTP-server of the microprogramming-based VPN router TP-Link TL-R600VPN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the HTTP server of the microprogrammed VPN router TP-Link TL-R600VPN relates to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information ...

The vulnerability of TP-Link M7350 router’s microprogramming software, related to the lack of data cleaning measures at the control level, allows attackers to execute arbitrary commands.

The vulnerability of TP-Link M7350 router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands until authentication is completed...

D-Link DIR-615 Input Validation Error Vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to create a root admin user...

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software routers allows a hacker to execute arbitrary code.

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP...

The vulnerability of the web interfaces of D-Link DIR-868L B1 and D-Link DIR-817LW A1 wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interfaces of D-Link DIR-868L B1 and D-Link DIR-817LW A1 wireless routers is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using value...