Linksys E1200 and E2500 OS Command Injection Vulnerability (CNVD-2019-22778)

The Belkin Linksys E1200 and E2500 are both wireless router products in the E-Series from Belkin USA. An operating system command injection vulnerability exists in the Belkin Linksys E1200 with firmware version 2.0.09 and the Linksys E2500 with firmware version 3.0.04, which can be exploited by...

ASUS RT-AC58U Cross-Site Scripting Vulnerability

ASUS RT-AC58U is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS RT-AC58U version 3.0.0.4.3806516. The vulnerability can be exploited to inject arbitrary web script or HTML via multiple files AdvancedASUSDDNSContent.asp, AdvancedWSecurityContent.asp,...

AirTies Air 5343v2 Cross-Site Scripting Vulnerability

AirTies Air 5343v2 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5343v2. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

Threatpost New Wrap Podcast For Oct. 5

Threatpost’s Lindsey O’Donnell and Tom Spring break down the highlights on the heels of a week filled with cybersecurity news. Included in the podcast week news wrap, ending Oct. 5, are the Bloomberg report alleging that a China government-affiliated group slipped tiny microchips into Super Micro...

Command Injection Vulnerability in D-Link DIR-823G

The D-Link DIR-823G is a wireless router. A command injection vulnerability exists in the D-Link DIR-823G. An attacker can exploit the vulnerability to execute arbitrary code...

Code execution vulnerability in Xiaomi Router R1D

Xiaomi Router R1D is a router. A code execution vulnerability exists in Xiaomi Router R1D. An attacker can exploit the vulnerability to execute arbitrary code...

D-Link DIR-816 Command Injection Vulnerability (CNVD-2019-02394)

D-Link DIR-816 is a home router product from AUO. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a program that uses HTTP requests to build commands, and can be exploited by an attacker for command injection...

TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07048)

The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...

TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07047)

The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...

TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07042)

The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...

CVE-2018-17010

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanhost2g bandwidth...

CVE-2018-15874

Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request...

CVE-2017-12575

An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmwar...

Kraftway 24F2XG Router Denial of Service Vulnerability (CNVD-2018-16289)

The Kraftway 24F2XG Router is a wireless router product from the Russian company Kraftway. A denial of service vulnerability exists in the Kraftway 24F2XG Router using firmware version 3.5.30.1118. An attacker could exploit this vulnerability to cause a denial of service...

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the manipulation of inter-site requests, allowing a perpetrator to change the device’s password.

The vulnerability of the microprogrammed software of the 4G LTE Light Industrial M2M Router NWL-25 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to remotely change the device’s password...

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the disclosure of information, allowing a intruder to gain unauthorized access to protected data.

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router NWL-25 relates to the disclosure of information through the reading of directory files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

Intelbras Win 240 Cross-Site Scripting Vulnerability

The Intelbras Win 240 is a wireless router from Intelbras Brazil. A cross-site scripting vulnerability exists in Intelbras Win 240 version 1.1.0. A remote attacker can exploit the vulnerability to change the Admin password...

TP-Link Wireless N Router WR840N - Denial of Service (PoC)

Exploit Title:- TP-Link Wireless N Router WR840N - Denial of Service PoC Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version: TP-Link Wireless N Router WR840N Category: Hardware Exploit...

CVE-2016-8631

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site...

PT-2018-5038 · Red Hat · Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: OpenShift Enterprise 3 affected versions not specified Description: The issue arises from the OpenShift Enterprise 3 router's failure to properly sort routes when processing new additions. This allows an attacker with route creation access to...