The vulnerability of Huawei AR3200 router’s micro-programming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Huawei AR3200 router’s micro-programming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted network packet...

D-Link DIR-600M Rev. Cx Cross-Site Request Forgery Vulnerability

The D-Link DIR-600M Rev. Cx is a wireless router product from AUO. A cross-site request forgery vulnerability exists in the D-Link DIR-600M Rev. Cx. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious operations in the context of the...

D-Link DWR-932B router vulnerable (CNVD-2017-01664)

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker could exploit the vulnerability to bypass security restrictions...

D-Link DIR-600M - Cross-Site Request Forgery

Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: C1 Firmware version: 3.03 Tested on:All...

NETGEAR WNR2000v5 router authentication bypass vulnerability

The NETGEAR WNR2000v5 router is a popular router device. An authentication bypass vulnerability exists in the NETGEAR WNR2000v5 router. An attacker can use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...

D-Link DWR-932B Command Injection Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary commands...

Multiple NETGEAR routers are vulnerable to administrator password information leaks

The NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 are wireless router products from Netgear, Inc. Information disclosure vulnerabilities exist in several NETGEAR products. For example, the models in question have an open Intern...

NETGEAR WNR2000 Router Heap Buffer Overflow Vulnerability

The Netgear WNR2000 is a wireless router product from the American company Netgear. A heap buffer overflow vulnerability exists in the NETGEAR WNR2000 router. Since the router HTTP server handles .cgi files by way of URLs, an attacker exploiting the vulnerability could cause a denial of service...

Tenda/Dlink/TP-LINK TD-W8961ND 'DHCP' Cross-Site Scripting Vulnerability

Tenda/Dlink/TP-LINK are all line router manufacturers that have released numerous models of router products. A cross-site scripting vulnerability exists in Tenda/Dlink/TP-LINK TD-W8961ND 'DHCP'. Allows an attacker to inject malicious script code on the application side to manipulate the router dh...

CVE-2016-6438

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS...

D-Link DWR-932B LET Router WPS PIN Generator Vulnerability

The D-Link DWR-932B LET is a wireless router. A vulnerability exists in the WPS PIN generator of the D-Link DWR-932B LET router. Since a user can temporarily generate a new WPS PIN via the router's web management interface, an attacker can exploit the vulnerability to use the PIN to access a...

Backdoor Account Vulnerability in Telnet Service on D-Link DWR-932B LET Router

The D-Link DWR-932B LET is a wireless router. A backdoor account vulnerability exists in the Telnet service of the D-Link DWR-932B LET router. Since the D-Link wireless router runs Telnet service with two hard-coded secret accounts admin:admin and root:1234 by default, an attacker can exploit the...

TP-Link Archer CR-700 Cross-Site Scripting Vulnerability

The TP-Link Archer CR-700 is a router. A cross-site scripting vulnerability exists in the TP-Link Archer CR-700. A remote attacker can exploit this vulnerability by importing a configuration file to change the router's configuration...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

Cisco IOS XR on NCS 6000 Denial of Service Vulnerability

Cisco IOS XR on NCS 6000 is an operating system from Cisco that runs on 6000 series router devices. A denial of service vulnerability exists in Cisco IOS XR versions 6.0 and 6.0.1 on Cisco NCS 6000 devices. A remote attacker can exploit this vulnerability by sending specially crafted OSPFv3 packe...

ASUS RT-N10E Cross-Site Scripting Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A cross-site scripting vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to launch a cross-site scripting attack...

Huawei WS331a Cross-Site Request Forgery Vulnerability

The Huawei WS331a is a mini wireless router from the Chinese company Huawei. The Huawei WS331a suffers from a cross-site request forgery vulnerability that allows a remote attacker to construct a malicious URI, trick the user into parsing it, and can perform malicious actions in the context of th...

Hitron CGNV4 Router Cross-Site Request Forgery Vulnerability Vulnerability

Hitron CGNV4 is a router product from Hitron. A cross-site request forgery vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC. An attacker can exploit the vulnerability to steal cookie-based authentication...

Hitron CGNV4 Router Security Bypass Vulnerability

Hitron CGNV4 is a router product from Hitron. A security bypass vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC, which can be exploited by attackers to obtain sensitive information and perform unauthorized operations...

ZyXEL P660HN-T v1 Router Unauthenticated Remote Command Execution Vulnerability

The ZyXEL P660HN-T v1 is a router manufactured by Hutchinson Technology. The ZyXEL P660HN-T v1 router suffers from an unauthenticated remote command execution vulnerability. Command injection in the remotehost parameter and the presence of a default account on the device allow an unauthenticated...