Debian RaspAP Arbitrary Command Execution

The vulnerability of the software for creating wireless routers based on Debian RaspAP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted POST request with t...

Tenda AC10U addWifiMacFilter Function Use-After-Free

The vulnerability of the addWifiMacFilter function in the Tenda AC10U router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

D-Link DIR-823G Router SetWifiDownSettings Buffer Overflow

The vulnerability of the SetWifiDownSettings function in the D-Link DIR-823G router’s microprogramming system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Milesight UR32L Router Code Execution

The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router set_dmvpn Code Execution

The vulnerability of the setdmvpn function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Tenda FH1203 Form Set Client State Code Execution

The vulnerability of the formSetClientState function in Tenda FH1203 router microprogramming software is related to the ability to write data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Tenda FH1203 Code Execution

The vulnerability of the addWifiMacFilter function in the microprogrammed routing software Tenda FH1203 lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Moxa TN-5900 series router Unauthenticated Access Disclosure

The vulnerability of Moxa TN-5900 series router microprogramming software is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

TOTOLINK Efficient Multicast Forwarding Module Code Execution

The vulnerability of the Efficient Multicast Forwarding EMF module in microprogrammed router software from TOTOLINK, TP-LINK, ASUS, Arris, Buffalo, D-Link, Linksys, Netgear, TRENDnet, Xiaomi, Luxul, Phicomm, and Ubee lies in the execution of operations outside the buffer in memory. Exploiting thi...

Tenda AC1206 Router Arbitrary Command Execution

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary commands...

Zyxel LTE3202-M437 LTE3316-M604 Privilege Escalation

The vulnerability of Zyxel LTE3202-M437 and LTE3316-M604 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the device via the TELNET network protocol...

CVE-2023-20072

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

Cisco IOS XE DoS

The vulnerability of the packet processing and fragmentation mechanism in Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XR security vulnerabilities

Cisco IOS XR is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XR, which stems from a security issue in GRand Unified Bootloader GRUB, which can be exploited by an attacker to view sensitive files on the console using the GRUB bootload...

lform/net_diagnose Component Arbitrary Command Execution

The vulnerability of the lform/netdiagnose component of Delta Electronics’ DX-2100-L1-CN router software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

D-Link DIR-645 Router DoS

The vulnerability of the genacgimain function in the D-Link DIR-645 A1 router’s microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

httpd daemon Unauthenticated Access Disclosure

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

anweb Code Execution

The vulnerability of the D-Link DIR-2150 router’s microprogrammed software service is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Robustel R1510 import_sdk_file Command Execution

The vulnerability of the importsdkfile function in the Microprogramming Software for VPN Routers of Robustel R1510 relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

Tenda AC6 setstaticroutecfg Heap Buffer Overflow DoS

The vulnerability of the setstaticroutecfg function in Tenda AC6 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...