CVE-2016-8631

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site...

PT-2018-5038 · Red Hat · Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: OpenShift Enterprise 3 affected versions not specified Description: The issue arises from the OpenShift Enterprise 3 router's failure to properly sort routes when processing new additions. This allows an attacker with route creation access to...

Router vulnerability reproduction: from the principle to the first verification-vulnerability and early warning-the black bar safety net

The IOT vulnerability to reproduction and the traditional system vulnerabilities to reproduce the different point is that the physical network vulnerability depends on the hardware, almost every vulnerability all have to buy a new piece of hardware to reproduce, which is different from the...

WL-330NUL vulnerable to cross-site request forgery

Overview WL-330NUL provided by ASUS Japan Inc. is a portable wireless LAN router. WL-330NUL contains a cross-site request forgery vulnerability CWE-352. Masashi Sakai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

D-Link DIR-300 Cross-Site Request Forgery Vulnerability

The D-Link DIR-300 is a wireless router device. A cross-site request forgery vulnerability exists in the D-Link DIR-300, which can be exploited by an attacker to perform an unauthorized operation, open remote access and save settings...

Hacker Sold Stolen U.S. Military Drone Documents On Dark Web For Just $200

You never know what you will find on the hidden Internet 'Dark Web.' Just about an hour ago we reported about someone selling remote access linked to security systems at a major International airport for $10. It has been reported that a hacker was found selling sensitive US Air Force documents on...

TP-LINK TL-WR841N Standalone Hijacking Vulnerability

TP-LINK TL-WR841N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n version. An attacker can exploit the vulnerability to hijack a click operation and cause the user to perform a...

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

TP-Link TL-WR841N v13 Cross-Site Request Forgery Vulnerability

The TP-Link TL-WR841N v13 is a wireless router device. A cross-site request forgery vulnerability exists in the TP-Link TL-WR841N v13, which allows an attacker to authenticate a user's name to perform arbitrary operations...

TP-Link TL-WR841N v13 Authentication Vulnerability

The TP-Link TL-WR841N v13 is a wireless router device. An authentication vulnerability exists in the TP-Link TL-WR841N v13, which could allow an attacker sending an HTTP request to the router to bypass the authentication mechanism of the attacked web interface and perform arbitrary actions as a...

Router Vulnerability and the VPNFilter Botnet

On May 25, the FBI asked us all to reboot our routers. The story behind this request is one of sophisticated malware and unsophisticated home-network security, and it's a harbinger of the sorts of pervasive threats ­ from nation-states, criminals and hackers ­ that we should expect in coming year...

D-Link DIR-620 Router Cross Site Scripting Vulnerability

D-link DIR-620 is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-620 due to the program failing to filter for special characters in the 'Search' field and failing to properly handle XMLHttpRequest objects. A remote attacker can use this...

CVE-2018-8898

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...

D-Link DIR-550A and DIR-604M Privilege Acquisition Vulnerability

The D-Link DIR-550A and DIR-604M are both wireless router products from AUO D-Link. A security vulnerability exists in the D-Link DIR-550A and DIR-604M versions 2.10KR and earlier. The vulnerability can be exploited by an attacker to gain access by using the default TELNET account...

Arbitrary Code Execution Vulnerability in Multiple Sierra Wireless Products

Sierra Wireless AirLink GX400 and others are router products from Sierra Wireless Canada. A security vulnerability exists in a number of Sierra Wireless products that stems from a program's failure to perform adequate input validation of user-controlled input in HTTP requests. An attacker could...

VulnCheck KEV: CVE-2018-10561

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution...

CVE-2017-15043

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected...

Command injection

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

The vulnerability of the ZyXEL P-870H-51 DSL router’s microprogramming software, due to lack of access control, allows a intruder to trigger a service failure or cause other adverse effects.

The vulnerability of the ZyXEL P-870H-51 DSL router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or other adverse effects...

CVE-2018-5234

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software...