301 matches found
Targeted ransomware: it’s not just about encrypting your data!
When we talk about ransomware, we need to draw a line between what it used to be and what it currently is. Why? Because nowadays ransomware is not just about encrypting data – its primarily about data exfiltration. After that, its about data encryption and leaving convincing proof that the attack...
The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming software, related to unencrypted storage of user credentials, allows a intruder to gain unauthorized access to protected information.
The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming systems lies in the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Command Injection Vulnerability in Archer AX10 Router Firmware
TP-LINK is a leading global supplier of network communication equipment. A command injection vulnerability exists in the Archer AX10 router firmware, which can be exploited by attackers to gain server privileges...
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers < 1.0.03.18 SSL DoS (cisco-sa-sb-dos-ZN5GvNH7)
According to its self-reported version, Cisco Small Business RV Series Router Firmware is prior to 1.0.03.18. It is, therefore, affected by a DoS vulnerability in the Secure Sockets Layer SSL VPN feature due to a lack of proper validation of HTTP requests. An unauthenticated, remote attacker coul...
CVE-2020-24034
Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sessid, nonce, and ha1 values inside of the serialized session cookie, an attacker may...
Cisco Small Business RV Series RCE (cisco-sa-rv-rce-m4FEEGWX)
According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by an remote command execution RCE vulnerability due to improper validation of user data. An authenticated remote attacker can exploit this, via HTTP requests, to execute arbitrary code with high...
Exploit for OS Command Injection in Gpononu 1Ge_Router_Wifi_Onu_V2801Rw_Firmware
A proof of concept for CVE-2020-8958 written in Python. The scri...
The vulnerability of the executable file cgibin.exe of the D-Link DIR-865L router’s microprogramming system allows a hacker to execute arbitrary operating system commands.
The vulnerability of the executable file cgibin.exe of the D-Link DIR-865L router operating system exists due to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.
The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Cisco Small Business RV016, RV042, RV042G, and RV082 router microprogramming software lies in the presence of embedded authentication data (a static H.509 certificate), which allows attackers to escalate their privileges.
The vulnerability of Cisco Small Business RV016, RV042, RV042G, and RV082 router microprogramming software is related to the presence of embedded authentication data static certificate H.509. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of Zyxel GS1900 series router microprogramming software lies in the fact that both users and administrators have identical access privileges when connecting via SSH. This allows a hacker to exploit this privilege to gain increased access.
The vulnerability of Zyxel GS1900 series router microprogramming software is related to the presence of identical access privileges when connecting via SSH for both users and administrators. Exploiting this vulnerability allows a malicious actor to enhance their privileged status remotely...
The vulnerability of the Password Recovery component in Zyxel router microprogramming software of the GS1900 series allows a intruder to influence the integrity of the protected information.
The vulnerability of the Password Recovery component in Zyxel router microprogramming systems of the GS1900 series exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected informati...
The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.
The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through fragmented packets...
The vulnerabilities of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the virtual machines used for setting up and controlling wired and wireless networks by Cisco FindIT Network Probe, allow attackers to increase their privileges.
The vulnerability of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the Cisco FindIT Network Probe software for configuring and controlling wired and wireless networks, is related to the presence of a hard-coded pair of open/closed ke...
The vulnerability of D-Link DSL-2750U router microprogramming software, related to deficiencies in authentication procedures, allows attackers to trigger a service failure or disclose protected information.
The vulnerability of D-Link DSL-2750U router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose protected information...
CVE-2019-16313
ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code...
The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 allows a hacker to redirect users to a malicious website.
The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 is related to errors in checking input parameters of HTTP requests. Exploiting this vulnerability can allow a malicious actor to redirect users to a malicious website remotely...
Nighthawk AC3200 (R8000) NetUSB.ko Information Disclosure Vulnerability
The NETGEAR Nighthawk AC3200 is a tri-band wireless router from NETGEAR. An information disclosure vulnerability exists in NetUSB.ko version 1.0.2.66 in the Nighthawk AC3200 R8000 using firmware version 1.0.4.2810.1.54 11/7/18. The vulnerability stems from an error in configuration or other error...
The vulnerability of D-Link DIR-823G router’s microprogramming software arises from the lack of measures taken to neutralize the special elements used in the operating system command set. This allows a hacker to execute arbitrary operating system commands.
The vulnerability of D-Link DIR-823G router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands...
