2317 matches found
D-Link DIR-816 A2 Router System Account Editing Vulnerability
The D-Link DIR-816 A2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-816 A2 version 1.11, which stems from the program only checking for random tokens when authorizing a goform request. An attacker can exploit the vulnerability by obtainin...
Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34639)
The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...
Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34640)
The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...
GPON Router Unauthenticated Stack Overflow Vulnerability
GPON Gigabit-Capable PON technology is the latest generation of broadband passive optical integrated access standard based on the ITU-TG.984.x standard. Gigabit-Capable PON GPON technology is the latest generation of broadband passive optical integrated access standard based on ITU-TG.984.x...
The vulnerability of Huawei HG router’s micro-programming software, related to security mechanism failures, allows attackers to gain unauthorized access to protected data.
The vulnerability of Huawei HG router microprogramming software is related to security mechanism errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected data...
NEC Aterm WG1200HP OS Command Injection Vulnerability (CNVD-2019-01099)
The NEC Aterm WG1200HP is a wireless router from Nippon Electric NEC. An operating system command injection vulnerability exists in the NEC Aterm WG1200HP using firmware version 1.0.31 and earlier. The vulnerability can be exploited to execute arbitrary operating system commands with the 'sysCmd ...
CVE-2018-20377
Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /getgetnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03,...
CVE-2018-20372
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...
Multiple Buffer Overflow Vulnerabilities in Tenda AC9 Routers
Tenda AC9 Router is a router produced by Shenzhen Jixiang Tenda Technology Co. Tenda AC9 router there are multiple buffer overflow vulnerabilities, the vulnerability stems from the router background on the http request parameter content length is not limited, an attacker can use the vulnerability...
CVE-2018-13023
System command injection vulnerability in wifiaccess in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter...
Router vulnerability-prone, Mirai new variant of the struck-vulnerability warning-the black bar safety net
One, Foreword Recently, Tencent Security Cloud Ding lab to listen to the wind threat perception platform monitoring the discovery A to attack router worm, after analysis, found that this worm is mirai virus new variants, and before mirai viruses, the worms not only by the early generation of mira...
Rapidly Growing Router Botnet Takes Advantage of 5-Year-Old Flaw
A fresh botnet is spreading across the landscape, targeting router equipment. So far, hundreds of thousands of bot endpoints have already been identified, and they’re apparently being marshaled to send out massive amounts of spam. The botnet first emerged in September, according to 360Netlab...
Tenda AC7, AC9 and AC10 Command Injection Vulnerabilities
The Tenda AC7, AC9 and AC10 are all wireless router products from Tenda, a Chinese company. A command injection vulnerability exists in the Tenda AC7, AC9, and AC10. An attacker can exploit this vulnerability by sending a specially crafted request to execute arbitrary operating system commands...
Buffer overflow
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value...
Multiple Tenda products httpd buffer overflow vulnerability (CNVD-2019-01884)
Tenda AC7 and others are wireless router products from Tenda in China. httpd is one of the HTTP server components. A buffer overflow vulnerability exists in httpd in several Tenda products, which can be exploited by an attacker to cause a denial of service overwrite the return address of a functi...
Linksys E1200 and E2500 OS Command Injection Vulnerability (CNVD-2019-22778)
The Belkin Linksys E1200 and E2500 are both wireless router products in the E-Series from Belkin USA. An operating system command injection vulnerability exists in the Belkin Linksys E1200 with firmware version 2.0.09 and the Linksys E2500 with firmware version 3.0.04, which can be exploited by...
ASUS RT-AC58U Cross-Site Scripting Vulnerability
ASUS RT-AC58U is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS RT-AC58U version 3.0.0.4.3806516. The vulnerability can be exploited to inject arbitrary web script or HTML via multiple files AdvancedASUSDDNSContent.asp, AdvancedWSecurityContent.asp,...
AirTies Air 5343v2 Cross-Site Scripting Vulnerability
AirTies Air 5343v2 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5343v2. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...
Threatpost New Wrap Podcast For Oct. 5
Threatpost’s Lindsey O’Donnell and Tom Spring break down the highlights on the heels of a week filled with cybersecurity news. Included in the podcast week news wrap, ending Oct. 5, are the Bloomberg report alleging that a China government-affiliated group slipped tiny microchips into Super Micro...