301 matches found
NSA, FBI, CISA, and Japanese Partners Release Advisory on PRC-Linked Cyber Actors
Today, the U.S. National Security Agency NSA, Federal Bureau of Investigation FBI, and Cybersecurity and Infrastructure Security Agency CISA, along with the Japan National Police Agency NPA and the Japan National Center of Incident Readiness and Strategy for Cybersecurity NISC released joint...
People's Republic of China-Linked Cyber Actors Hide in Router Firmware
Executive Summary The United States National Security Agency NSA, the U.S. Federal Bureau of Investigation FBI, the U.S. Cybersecurity and Infrastructure Security Agency CISA, the Japan National Police Agency NPA, and the Japan National Center of Incident Readiness and Strategy for Cybersecurity...
Command injection
Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint...
CVE-2023-41029 Juplink RX4-1500 Command Injection Vulnerability
Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint...
The vulnerability of the set_qos function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the set_dmvpn function in the Milesight UR32L router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the setdmvpn function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software allows a hacker to create or overwrite critical files and execute arbitrary code.
The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software lies in the incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows an attacker to create or overwrite critical files remotely, and execute arbitrary code...
The vulnerability of the FUN_0001be68 function in D-Link DIR-880 A1 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the FUN0001be68 function in D-Link DIR-880 A1 microprogrammed router software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-39674
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...
The vulnerability of the setaccount() function in Tenda’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the setaccount function in Tenda router microprogramming software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause servic...
The vulnerability of the setWanCfg function in TOTOLINK X5000R router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the setWanCfg function in TOTOLINK X5000R router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-39086
ASUS RT-AC66U B1 3.0.0.4.28651665 was discovered to transmit sensitive information in cleartext...
The vulnerability of the D-Link DIR-823G router’s microprogramming software, related to errors in the password recovery mechanism, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the D-Link DIR-823G router’s microprogramming software is related to errors in the password recovery mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by resetting the password...
The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger a memory buffer overflow.
The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger a memory buffer overflow...
The vulnerability of NETGEAR RAX30 router microprogramming software, related to the use of strictly encrypted login credentials, allows a hacker to gain full access to the system.
The vulnerability of NETGEAR RAX30 router microprogramming software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system...
The vulnerabilities of D-Link DIR-550A and DIR-604M router microprogramming software allow attackers to enhance their privileges.
The vulnerability of D-Link DIR-550A and DIR-604M router microprogramming software is related to insecure resource initialization. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
The vulnerability of D-Link DSL-3782 router’s microprogramming software allows a hacker to bypass the authentication process and gain access to confidential information.
The vulnerability of the D-Link DSL-3782 router’s microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to confidential information through a specially crafted...
H3C Magic R300 缓冲区错误漏洞
The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version, which originates from the DelDNSHnList interface of /goform/aspForm contains a stack overflow...
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to execute arbitrary code.
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the LocalIPAddress parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...
The vulnerability of Netgear SRX5308 router microprogramming software, related to improper release of resources, allows a hacker to trigger a service failure.
The vulnerability of Netgear SRX5308 micro-programmed software routers is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...