LG-ERICSSON LN202-003H HomeHub Router Remote Configuration Disclosure

!/usr/bin/perl -w LG-ERICSSON LN202-003H HomeHub Router Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not...

CVE-2019-16412

The CVE concerns a vulnerability in Tenda N301 wireless routers affecting the goform/setSysTools handler. A zero wanMTU value can be submitted and, unlike in the GUI which blocks it, may trigger a device crash. The issue is documented with the same description across NVD/Red Hat/NVD mirrors, conf...

The vulnerability of TP-Link’s microprogrammed software in routers, which stems from insufficient validation of input data, allows attackers to bypass the separation between the host network and the guest network.

The vulnerability of TP-Link’s microprogrammed routing software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to bypass the separation between the host network and the guest network using the DHCP protocol...

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR operating systems is related to errors in the processing of IS-IS protocol data packets. Exploiting this vulnerability can allow a malicious actor to cause service failures...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-30427)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the D-Link DIR-823G. The vulnerability stems from a failure of a network system or product to properly filter specific elements of externally input data during the construction o...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-30426)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the D-Link DIR-823G. The vulnerability arises from a failure of a network system or product to properly filter specific elements of externally entered data during the constructio...

TP-Link M7350 V3 Command Injection Vulnerability (CNVD-2019-31307)

The TP-Link M7350 is a portable wireless router device from China P&L TP-Link. A command injection vulnerability exists in the TP-Link M7350 V3, which can be exploited by an attacker to execute illegal commands...

D-Link DIR-823G Access Control Error Vulnerability

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in the D-Link DIR-823G. An attacker can exploit this vulnerability to hijack DNS service configuration information for all clients in the WLAN...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability (CNVD-2019-22208)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the ssi binary in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properl...

The vulnerability of D-Link DIR-818LW router’s microprogramming software lies in the lack of measures to clean incoming data, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-818LW router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of component Acl.asp in the D-Link DSL-3782 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of component Acl.asp in the D-Link DSL-3782 router microprogramming system is related to insufficient checking of arguments passed to certain CLI command-line interface commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Command Injection Vulnerability in Multiple D-Link Products

The D-Link DIR-845, among others, is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the soap.cgi?service=WANIPConn1 URL in multiple D-Link products. The vulnerability stems from a network system or product not properly filtering specific elements o...

Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the web-based management interface in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to access information in the syslog file...

iBall Baton iB-WRB302N Information Disclosure Vulnerability

The iBall Baton iB-WRB302N is a wireless router from iBall India. A vulnerability with trust management issues exists in the iBall Baton iB-WRB302N version 20122017. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can...

CVE-2019-12195

CVE-2019-12195 affects TP-Link TL-WR840N v5 00000005. The vulnerability is a cross‑site scripting flaw in the device’s web interface that can be triggered via the network name. Exploitation requires the attacker to log in by breaking the password (e.g., via THC-HYDRA) and access the admin login p...

TP-LINK TL-WR840N v5 XSS Injection Vulnerability

The TP-Link TL-WR840N is a wireless router from China P&L TP-Link. A cross-site scripting vulnerability exists in TP-LINK TL-WR840N v5 00000005 using firmware version 0.9.1 3.16 v0001.0 Build 171211 Rel.58800n. The vulnerability stems from the lack of proper validation of client data by the WEB...

Huawei routers’ vulnerabilities, related to errors in digital signatures, allow attackers to install malicious software.

The vulnerability of Huawei routers is related to errors in checking digital signatures. Exploiting this vulnerability could allow a local attacker to install malicious software on devices...

CVE-2017-18374

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit...

Intelbras IWR 3000N Denial Of Service

/bin/bash PoC based on CVE-2019-11415 created by Social Engineering Neo. Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/ A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing ...