Huawei HG655m Router Command Injection Vulnerability

The HG655 is a router product from Huawei, a Chinese company. The Huawei HG655m router suffers from a command injection vulnerability that can be exploited by an attacker to execute operating system commands on a device with higher privileges by forging a UPnP SOAP request...

CG-WGR1200 Security Bypass Vulnerability

The CG-WGR1200 is a wired LAN broadband router. A security bypass vulnerability exists in the CG-WGR1200 firmware version 2.20 and earlier, which can be exploited by an attacker to change the login password...

The vulnerability of TRENDnet TEW-823DRU router microprogramming software, related to the use of pre-installed configuration data, allows a hacker to gain access to the device.

The vulnerability of TRENDnet TEW-823DRU router microprogramming software is related to the use of pre-installed account data for the root account. Exploiting this vulnerability allows a malicious actor to gain access to the device via an FTP session...

ZyXEL P-870H-51 DSL Router CGI Denial of Service Vulnerability

ZyXEL P-870H-51 DSL Router is a wireless router product from ZyXEL Technology Inc. A security vulnerability exists in the exposed CGI endpoint of the ZyXEL P-870H-51 DSL Router version 1.00AWG.3D5, which stems from a failure of proper access control. An attacker could exploit this vulnerability t...

Huawei's Multiple Product Cross-Border Write Vulnerabilities

Huawei AR120-S and others are router products from Huawei China. A security vulnerability exists in several Huawei products, which stems from a program that fails to properly validate user-submitted data. A remote attacker can exploit the vulnerability by sending an abnormal OSPF message to cause...

Multiple Huawei products cross-border read vulnerability (CNVD-2018-05437)

Huawei AR120-S and others are router products from Huawei China. An out-of-bounds read vulnerability exists in multiple Huawei products, which stems from a program failing to adequately validate input. A remote attacker could exploit the vulnerability by sending a specially crafted signature to t...

Multiple Cisco Wireless VPN Routers Information Disclosure Vulnerabilities

The Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers are both Cisco routers. web interface is one of the web interfaces. An information disclosure vulnerability exists in the Web interface in the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Router...

Netis WF2419 Cross-Site Request Forgery Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site request forgery vulnerability exists in the Netis WF2419 version 2.2.36123. A remote attacker can exploit this vulnerability to delete the settings of Address Reservation List...

Netis WF2419 Cross-Site Scripting Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

CVE-2018-5999

An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01908)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the olmode variable of the interfacewan.lua file ...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01907)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. An arbitrary command execution vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit this vulnerability to execute arbitrary commands by injecting commands int...

The vulnerability of the Broadcom ACSD component (used on routers) involves buffer overflows, allowing attackers to execute arbitrary code.

The vulnerability of the Broadcom ACSD component used on routers is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a long string to port 5916...

D-Link DIR-605L Model B Denial of Service Vulnerability

D-Link DIR-605L Model B is a wireless router product from AUO D-Link. A denial of service vulnerability exists in versions prior to D-Link DIR-605L Model B FW2.11betaB06hbrf. An attacker could exploit this vulnerability by sending an HTTP request with a password field with a long string in the HT...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

The vulnerability of the login_mgrc.i program component in the DNR-320L, DNS-320LW, DNR-322L, DNR-326, and DNS-327L routers’ software allows a hacker to execute arbitrary code.

The vulnerability of the loginmgrc.cgi component of the DNR-320L, DNS-320LW, DNR-322L, DNR-326, and DNS-327L router microprogramming systems arises due to buffer overflows in the stack. Exploitation of this vulnerability allows an attacker to execute arbitrary code by creating specially crafted...

MitraStar DSL-100HN-T1/GPT-2541GNAC - Privilege Escalation Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Privilege escalation MitraStar routers Date: 28-10-2017 Exploit Author: j0lama Vendor Homepage: http://www.mitrastar.com/ Provider Homepage: https://www.movistar.com/ Models affected: MitraStar DSL-100HN-T1 and MitraStar...

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

Recent Wi-Fi KRACK Vulnerability Affects Almost Everyone With an Endpoint

A vulnerability might allow cyber criminals to intercept data being transmitted between Wi-Fi access points and endpoints, recent research has uncovered. The vulnerability, known as KRACK, short for Key Reinstallation Attacks, affects WPA2, which is widely used by many Wi-Fi enabled devices and c...