PT-2024-29511 · Syrotech · Sy-Gpon-1110-Wdont Router

Name of the Vulnerable Software and Affected Versions: SyroTech SY-GPON-1110-WDONT Router affected versions not specified Description: This issue exists due to the storage of default username and password credentials in plaintext within the router's firmware/database. An attacker with physical...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12006)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the mitInterface parameter in ip/goform/RouteStatic containing a stack-based buffer overflow vulnerability for which no detailed vulnerability details are...

TOTOLINK A6000R 安全漏洞

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A6000R. The vulnerability stems from the iface parameter in the vifdisable function failing to properly validate or clear user input. An attacker can use this...

Tenda AC18 Buffer Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the deviceId parameter of ip/goform/addWifiMacFilter. No detailed vulnerability details are provided at this time...

D-Link DIR-2640 Stack Buffer Overflow Remote Code Execution Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router manufactured by the Chinese company AUO D-Link, which is mainly used to provide wireless network connectivity. The D-Link DIR-2640 suffers from a stack buffer overflow remote code execution vulnerability that stems from a stack-based buffer overflo...

Realtek rtl819x Jungle SDK boa rollback_control_code stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1878 Realtek rtl819x Jungle SDK boa rollbackcontrolcode stack-based buffer overflow vulnerability July 8, 2024 CVE Number CVE-2023-49595 SUMMARY A stack-based buffer overflow vulnerability exists in the boa rollbackcontrolcode functionality of Realtek rtl819x...

TOTOLINK A6000R Code Execution Vulnerability

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a code execution vulnerability that originates from allowing a remote attacker to execute arbitrary code via the iface parameter in the vifenable function. No details of the vulnerability...

NETGEAR WNR614 Information Disclosure Vulnerability

The NETGEAR WNR614 is an N300 wireless router with external antenna from Netgear USA. The NETGEAR WNR614 suffers from an information disclosure vulnerability that originates from allowing an attacker to bypass authentication and access the management interface via an unspecified vector. No detail...

Unspecified Vulnerability in NETGEAR WNR614

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 suffers from a security vulnerability that stems from not properly setting the HTTPOnly flag of a cookie, which can be exploited by an attacker to intercept and access sensitive communications...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A code execution vulnerability exists in the TOTOLINK X5000R mtu parameter, which stems from the mtu parameter of cstecgi.cgi failing to properly filter special elements of the constructed snippet. An attacker could exploit...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

D-Link DIR-2640 安全漏洞

The D-Link DIR-2640 is a high-power Wi-Fi router from Taiwan, China's AUO D-Link that supports the AC2600 WiFi standard with dual-band 2.4GHz and 5GHz network transmission. The D-Link DIR-2640 suffers from a command injection vulnerability, which stems from the DestNetwork command injection remot...

Unspecified vulnerability in Tenda N300F3 (CNVD-2025-16317)

The Tenda N300F3 is Tenda's wireless router designed for small office and home office environments. A security vulnerability exists in the Tenda N300F3 that originates from allowing a user to bypass the intended security policy and create weak passwords. No detailed vulnerability details are...

Unspecified vulnerability in Tenda W15E (CNVD-2024-23319)

Shenzhen Jixiang Tengda Technology Co., Ltd W15E is a wireless router. A security vulnerability exists in Shenzhen Jixiang Tengda Technology Co., Ltd W15E version 15.11.0.14, which stems from a buffer overflow vulnerability in the qosGuestDownstream parameter of the guestWifiRuleRefresh method. N...

The vulnerability of the fromSafeUrlFilter function in the microprogramming router software Tenda F1202, FH1202, 4G300 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromSafeUrlFilter function in the microprogramming router software Tenda F1202, FH1202, and 4G300 is related to buffer overflow during the processing of the page parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

Tenda AC10 Buffer Overflow Vulnerability

Tenda A18 is a dual-band Gigabit wireless router launched for 200M and above fiber users. A buffer overflow vulnerability exists in Tenda AC10, which stems from the adslPwd parameter of the formWanParameterSetting method failing to correctly validate the length size of the input data, no detailed...

Securing your home network is long, tiresome, and entirely worth it, with Carey Parker: Lock and Code S05E07

This week on the Lock and Code podcast… Few words apply as broadly to the public—yet mean as little—as “home network security.” For many, a “home network” is an amorphous thing. It exists somewhere between a router, a modem, an outlet, and whatever cable it is that plugs into the wall. But the id...

CVE-2024-2415

CVE-2024-2415 affects Movistar 4G router ES_WLD71-T1_v2.0.201820. Root cause is a command injection via an authenticated POST to the endpoint /cgi-bin/gui.cgi, allowing command execution inside the router. Impact is high (authenticated local command execution). Remediation/mitigation: apply vendo...

GL.iNet Router Security Vulnerability

GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in the GL.iNet Router 4.x firmware version, which originated from a vulnerability that allows an attacker to bypass authentication and gain access to the router's web interface...

TOTOLINK X5000R Denial of Service Vulnerability

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...