CVE-2021-30229

The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...

CVE-2020-14101

The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...

CVE-2017-18373

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a...

CVE-2013-6026

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlsetroodkcableoj28840ybtide...

CVE-2018-17007

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanwds2g ssid...

D-Link DI-7003GV2 /login.data File Information Disclosure Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /login.data, which can be exploited by an attacker to cause information disclosure...

Tenda FH451 Code Execution Vulnerability

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a code execution vulnerability that stems from the formSafeEmailFilter function failing to properly filter special elements of the constructed snippet. No details of the vulnerability are available at this ti...

D-Link DIR-605L mac parameter command injection vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter mac failing to properly filter constructed command special characters, commands, and more. No details of the vulnerability are provide...

Tenda W20E formSetDebugCfg function level parameter command injection vulnerability

The Tenda W20E is a router from the Chinese company Tenda. The Tenda W20 suffers from a command injection vulnerability that stems from the formSetDebugCfg function level parameter failing to properly filter construct command special characters, commands, and so on. No details of the vulnerabilit...

PT-2025-19722 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif disable function. Recommendations: For version 1.0.2.26, consider disabling the vif...

PT-2025-19721 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli do enr pin wps function. Recommendations: For version 1.0.2.26, consider...

TOTOLINK N150RT /boafrm/formPortFw File Buffer Overflow Vulnerability

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that originates from the parameter servicetype in the file /boafrm/formPortFw that fails to properly validate the length of the input data, which can b...

BEC Routers 安全漏洞

BEC Routers is a series of routers from BEC USA. A security vulnerability exists in BEC Routers that originates in the /cgi-bin/toolsusermanage.asp transfer of a list of user credentials, which could lead to the disclosure of sensitive information...

PT-2025-16964 · Alfa · Alfa Wifi Camppro

Name of the Vulnerable Software and Affected Versions: ALFA WiFi CampPro router version ALFA CAMPRO-co-2.29 Description: A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the GAPSMinute3 key value. This enables the attacker to potentially gain control over the affecte...

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08907)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

pfSense Login Scanner

This module performs login attempts against a Netgate pfSense router webpage to bruteforce possible credentials. Module Options msf use auxiliary/scanner/http/pfsenselogin msf auxiliarypfsenselogin show actions ...actions... msf auxiliarypfsenselogin set ACTION msf auxiliarypfsenselogin show...

D-Link DIR-605L/DIR-618 formAdvNetwork Function Access Control Error Vulnerability

The D-Link DIR-605L and D-Link DIR-618 are both a wireless router from China-based AUO D-Link. An Access Control Error vulnerability exists in the D-Link DIR-605L version 3.02 and the D-Link DIR-618 version 2.02, which stems from improper access control in the file /goform/formAdvNetwork, and can...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a buffer overflow vulnerability that stems from the formWifiWpsOOB function failing to properly validate the length size of the input data, no details of the vulnerability are provided at this time...

TOTOlink A3002R static_gw parameter buffer overflow vulnerability

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002R version V1.1.1-B20200824.0128, which stems from the staticgw parameter failing to correctly validate the length and size of the input data, and can be exploit...

The vulnerability of the telnetd daemon in the microprogramming router Tenda AC15 allows a hacker to execute arbitrary commands.

The vulnerability of the telnetd microprogramming system for Tenda AC15 routers is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted requests...