D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-30427)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the D-Link DIR-823G. The vulnerability stems from a failure of a network system or product to properly filter specific elements of externally input data during the construction o...

TP-Link M7350 V3 Command Injection Vulnerability (CNVD-2019-31307)

The TP-Link M7350 is a portable wireless router device from China P&L TP-Link. A command injection vulnerability exists in the TP-Link M7350 V3, which can be exploited by an attacker to execute illegal commands...

D-Link DIR-823G Access Control Error Vulnerability

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in the D-Link DIR-823G. An attacker can exploit this vulnerability to hijack DNS service configuration information for all clients in the WLAN...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability (CNVD-2019-22208)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the ssi binary in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properl...

The vulnerability of component Acl.asp in the D-Link DSL-3782 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of component Acl.asp in the D-Link DSL-3782 router microprogramming system is related to insufficient checking of arguments passed to certain CLI command-line interface commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the...

The vulnerability of D-Link DIR-818LW router’s microprogramming software lies in the lack of measures to clean incoming data, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-818LW router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Command Injection Vulnerability in Multiple D-Link Products

The D-Link DIR-845, among others, is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the soap.cgi?service=WANIPConn1 URL in multiple D-Link products. The vulnerability stems from a network system or product not properly filtering specific elements o...

Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the web-based management interface in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to access information in the syslog file...

iBall Baton iB-WRB302N Information Disclosure Vulnerability

The iBall Baton iB-WRB302N is a wireless router from iBall India. A vulnerability with trust management issues exists in the iBall Baton iB-WRB302N version 20122017. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can...

CVE-2019-12195

CVE-2019-12195 affects TP-Link TL-WR840N v5 00000005. The vulnerability is a cross‑site scripting flaw in the device’s web interface that can be triggered via the network name. Exploitation requires the attacker to log in by breaking the password (e.g., via THC-HYDRA) and access the admin login p...

TP-LINK TL-WR840N v5 XSS Injection Vulnerability

The TP-Link TL-WR840N is a wireless router from China P&L TP-Link. A cross-site scripting vulnerability exists in TP-LINK TL-WR840N v5 00000005 using firmware version 0.9.1 3.16 v0001.0 Build 171211 Rel.58800n. The vulnerability stems from the lack of proper validation of client data by the WEB...

Huawei routers’ vulnerabilities, related to errors in digital signatures, allow attackers to install malicious software.

The vulnerability of Huawei routers is related to errors in checking digital signatures. Exploiting this vulnerability could allow a local attacker to install malicious software on devices...

CVE-2017-18374

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit...

Intelbras IWR 3000N Denial Of Service

/bin/bash PoC based on CVE-2019-11415 created by Social Engineering Neo. Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/ A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing ...

JioFi 4G M2S 1.0.2 Denial Of Service

Exploit Title: cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices allows a DoS Hang via the mask POST parameter Exploit Author: Vikas Chaudhary Date: 21-01-2019 Vendor Homepage: https://www.jio.com/ Hardware Link:...

The vulnerability of the set_host_domain_name function in Cisco Linksys E1200 and Cisco Linksys E2500 router microprogramming systems allows a hacker to gain full control over the vulnerable device.

The vulnerability of the sethostdomainname function libshared.so in Cisco Linksys E1200 and Cisco Linksys E250 router microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability can allow ...

D-Link DSL-3782 OS Command Injection Vulnerability

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. An operating system command injection vulnerability exists in the D-Link DSL-3782 with firmware version 1.01. The vulnerability arises from a network system or product that does not properly filter special characters,...

Teltonika RUT9XX Authentication Vulnerability

Teltonika RUT9XX LuCI is a LET router product from Teltonika Lithuania. A security vulnerability exists in /cgi-bin/luci in Teltonika RTU9XX R00.05.00.5 prior to version R31.04.89. An attacker could exploit this vulnerability to crack user passwords...

D-Link DIR-816 A2 Router Reset Vulnerability

The D-Link DIR-816 A2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-816 A2 version 1.11, which stems from the program only checking for random tokens when authorizing a goform request. The vulnerability can be exploited to reset a route...