CVE-2024-41689

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WP...

PT-2024-29509 · Syrotech · Sy-Gpon-1110-Wdont Router

Name of the Vulnerable Software and Affected Versions: SyroTech SY-GPON-1110-WDONT Router affected versions not specified Description: This issue exists due to the unencrypted storage of WPA/WPS credentials within the router's firmware/database. An attacker with physical access could exploit this...

PT-2025-2796

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wi-Fi 5 BR-6476AC version 1.06 Description The issue is related to the lack of protection for the web interface structure of the Edimax AC1200 Wi-Fi 5 BR-6476AC router's firmware, allowing a remote attacker to conduct a Cross Sit...

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software, related to permission processing errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of ASUS RT-N12+ B1 router’s microprogramming software, related to the storage of passwords in an unencrypted form, allows a intruder to gain unauthorized access to protected information.

The vulnerability of ASUS RT-N12+ B1 router’s microprogramming software is related to deficiencies in the protection of registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access and alter the router’s settings...

New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities

A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to remotely infer a user's web activity. "SnailLoad exploits a bottleneck present on all Internet connections," the researchers said in a study...

CVE-2024-33375

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware...

CVE-2024-33375

CVE-2024-33375 affects LB-LINK BL-W1210M v2.0, where credentials are stored in plaintext inside the router firmware. The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no privileges, and no user interaction required. The issue originates from unencrypted storage of credentials in the ...

CVE-2024-36650

TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247B20211129, in the cgi function setNoticeCfg of the file /lib/cstemodules/system.so, the length of the user input string NoticeUrl is not checked. This can lead to a buffer overflow, allowing attackers to construct...

The vulnerability of the SetTelnetCfg function in the TELNET component of TOTOLINK CP450 router microprogramming software allows a intruder to execute arbitrary code.

The vulnerability of the SetTelnetCfg function in the TELNET component of TOTOLINK CP450 microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the TELNET network protocol...

The vulnerability of the fromP2pListFilter function in the microprogramming software for Tenda routers, F1202, FH1202, PA202, and PW201A, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromP2pListFilter function in the microprogramming software for Tenda F1202, FH1202, PA202, and PW201A routers is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the microprogramming software of the GL.iNet GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, and GL-AR300M routers relates to the bypassing of authentication processes, allowing an intruder to gain unauthorized access to the router’s web interface.

The vulnerability of the microprogramming software of the GL.iNet GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, GL-AR300M, and GL-B1300 lies in their ability to bypass authentication. Exploiting this vulnerability can allow an...

CVE-2024-28283

There is stack-based buffer overflow vulnerability in pcchangeact function in Linksys E1000 router firmware version v.2.1.03 and before, leading to remote code execution...

CVE-2024-25360

A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request to devicewebip...

Motorola CX2 Security Vulnerability

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability exists in the Motorola CX2L Router firmware version v1.0.1, which originates from an information disclosure vulnerability in the SystemWizardStatus component...

CVE-2024-25360

A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request to devicewebip...

Command injection

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

CVE-2024-22651

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

The vulnerability of the DisconnectVPN function in the microprogramming software for TOTOLINK X18 allows a hacker to execute arbitrary commands.

The vulnerability of the DisconnectVPN function in the TOTOLINK X18 router microprogramming system is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely using the pid parameter...

The vulnerability of the sub_48d630 function in D-Link DIR878 router microprogramming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the sub48d630 function in D-Link DIR878 router microprogramming software is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...