2316 matches found
Multiple Cisco Wireless VPN Routers Information Disclosure Vulnerabilities
The Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers are both Cisco routers. web interface is one of the web interfaces. An information disclosure vulnerability exists in the Web interface in the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Router...
Netis WF2419 Cross-Site Request Forgery Vulnerability
Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site request forgery vulnerability exists in the Netis WF2419 version 2.2.36123. A remote attacker can exploit this vulnerability to delete the settings of Address Reservation List...
Netis WF2419 Cross-Site Scripting Vulnerability
Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...
CVE-2018-5999
An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01908)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the olmode variable of the interfacewan.lua file ...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01907)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. An arbitrary command execution vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit this vulnerability to execute arbitrary commands by injecting commands int...
The vulnerability of the Broadcom ACSD component (used on routers) involves buffer overflows, allowing attackers to execute arbitrary code.
The vulnerability of the Broadcom ACSD component used on routers is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a long string to port 5916...
D-Link DIR-605L Model B Denial of Service Vulnerability
D-Link DIR-605L Model B is a wireless router product from AUO D-Link. A denial of service vulnerability exists in versions prior to D-Link DIR-605L Model B FW2.11betaB06hbrf. An attacker could exploit this vulnerability by sending an HTTP request with a password field with a long string in the HT...
CVE-2017-16902
On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...
The vulnerability of the login_mgrc.i program component in the DNR-320L, DNS-320LW, DNR-322L, DNR-326, and DNS-327L routers’ software allows a hacker to execute arbitrary code.
The vulnerability of the loginmgrc.cgi component of the DNR-320L, DNS-320LW, DNR-322L, DNR-326, and DNS-327L router microprogramming systems arises due to buffer overflows in the stack. Exploitation of this vulnerability allows an attacker to execute arbitrary code by creating specially crafted...
MitraStar DSL-100HN-T1/GPT-2541GNAC - Privilege Escalation Vulnerability
Exploit for hardware platform in category remote exploits Exploit Title: Privilege escalation MitraStar routers Date: 28-10-2017 Exploit Author: j0lama Vendor Homepage: http://www.mitrastar.com/ Provider Homepage: https://www.movistar.com/ Models affected: MitraStar DSL-100HN-T1 and MitraStar...
The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.
The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...
The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.
The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...
Recent Wi-Fi KRACK Vulnerability Affects Almost Everyone With an Endpoint
A vulnerability might allow cyber criminals to intercept data being transmitted between Wi-Fi access points and endpoints, recent research has uncovered. The vulnerability, known as KRACK, short for Key Reinstallation Attacks, affects WPA2, which is widely used by many Wi-Fi enabled devices and c...
The vulnerability of the Microprogrammed Routing Software of the Axesstel MU553S router lies in the use of the default standard password for the administrator account, allowing attackers to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the microprogrammed routing software Axesstel MU553S is related to the default use of a standard password for the administrator account. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...
Flying Fishstar VE602W+ Router Has Information Disclosure Vulnerability
Flyingfish Star VE602W+ is a newly developed Internet Behavior Management Router from Chengdu Flyingfish Star Technology Development Co. There is an information leakage vulnerability in FMS VE602W+ router. The vulnerability is caused by the leakage of the administrator password hash of FMS VE602W...
The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 allows a hacker to execute arbitrary shell commands with root privileges.
The vulnerability of the embedded microprogramming software in Comcast’s Cisco DPC3939 router is related to deficiencies in access control for the local network. Exploiting this vulnerability allows a malicious actor to execute arbitrary shell commands with root privileges by connecting to the...
Directory Traversal Vulnerability in Tenda W15E Devices
The Tenda W15E devices is a dual-band wireless router from China's Tenda. A directory traversal vulnerability exists in the Tenda W15E devices, which allows remote attackers to submit a special request to view the contents of system files in an application context...
The vulnerability of the check_login function in the D-Link DNR-326 router microprogramming system allows a hacker to bypass the authentication process.
The vulnerability of the checklogin function in the D–Link DNR-326 router microprogramming system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and register using the user’s cookie parameter...
D-Link DIR-850L REV.A and REV.B Certificate Acquisition Vulnerability (CNVD-2017-31785)
The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker could exploit...