Lucene search
K

144 matches found

BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.2 views

The vulnerability of the genacgi_main() function in D-Link DIR-645 A1 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the genacgimain function in the D-Link DIR-645 A1 router’s microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

10CVSS7.1AI score0.09529EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/05 12:0 a.m.2 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a intruder to gain unauthorized access to protected information.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

6.5CVSS6.5AI score0.00587EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/09/26 12:0 a.m.1 views

The vulnerability of the anweb microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-2150 router’s microprogrammed software service is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00623EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:0 a.m.2 views

The vulnerability of the `import_sdk_file()` function implementation in the microprogramming software for VPN routers of the Robustel R1510 allows a hacker to execute arbitrary commands.

The vulnerability of the importsdkfile function in the Microprogramming Software for VPN Routers of Robustel R1510 relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

10CVSS8.1AI score0.04437EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.2 views

The vulnerability of the setstaticroutecfg function in Tenda AC6 software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setstaticroutecfg function in Tenda AC6 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS8AI score0.01665EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.4 views

The vulnerability in the implementation of the sprintf() function in the microprogramming software for DIR-890L A1 allows a hacker to execute arbitrary code.

The vulnerability of the sprintf function implementation in the microprogramming-based router software DIR-890L A1 is related to incorrect checking of string lengths in HTTP headers. Exploiting this vulnerability could allow an attacker to execute arbitrary code by connecting through port 49152...

6.3CVSS7.4AI score0.13638EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/05 12:0 a.m.3 views

The vulnerability of NETGEAR R6900P, R7000, R7000P, and RS400 router’s built-in software lies in the insecure management of privileges, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR R6900P, R7000, R7000P, and RS400 router’s built-in software is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

9CVSS7.1AI score0.00959EPSS
Exploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.4 views

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a intruder to gain unauthorized access to protected information.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link’s TL-WR940N is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.0058EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/02/01 7:38 p.m.29 views

CAN-2022-1000071 Default Credentials in XB6 Fibre+ Gateway version XB6_0821

In Shaw Communications Inc XB6 Fibre+ Gateway version XB60821 a Default Credentials exists in the Router/Modem that can be attacked via local access resulting in Admin access to router...

6.8AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.4 views

The vulnerability of microprogrammed Wi-Fi router software such as CBR750, D6220, D6400, D8500, LAX20, MK62, MR60, MS60, R6300v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000 lies in the ability to record data beyond the buffer, allowing an intruder to cause a service failure.

The vulnerability of Microprogrammed Wi-Fi router software, including CBR750, D6220, D6400, D8500, LAX20, MK62, MR60, MS60, R6300v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75,...

5.7CVSS5.5AI score0.00369EPSS
Exploits0References3Affected Software39
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.3 views

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, and EX6420 lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, EX6420, RBS10, RBS20, RBS40...

9.6CVSS8.1AI score0.0202EPSS
Exploits0References3Affected Software36
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.3 views

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.0058EPSS
Exploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.3 views

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.0058EPSS
Exploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.3 views

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.00695EPSS
Exploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.3 views

The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).

The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y, is relat...

7.1CVSS7.3AI score0.00313EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.1 views

The vulnerability of TP-Link TL-XVR1800L router’s microprogramming software, related to improper input validation, allows a hacker to execute arbitrary code in the target system.

The vulnerability of TP-Link’s TL-XVR1800L router software relates to improper input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...

10CVSS6.1AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:0 a.m.2 views

The vulnerability of the Protection Against Distributed Denial of Service attacks function in Cisco IOS XE allows a attacker to cause a service failure.

The vulnerability of the Protection Against Distributed Denial of Service attacks in Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.8CVSS7.5AI score0.01285EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/09/09 5:15 a.m.2 views

CVE-2021-34720

A vulnerability in the IP Service Level Agreements IP SLA responder and Two-Way Active Measurement Protocol TWAMP features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or cause the IP SLA process to crash, resulting in ...

8.6CVSS5.8AI score0.01249EPSS
Exploits0References1
0day.today
0day.today
added 2021/08/21 12:0 a.m.183 views

NetModule Router Software Password Handling / Session Fixation Vulnerability

NetModule Router Software versions prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 suffer from insecure password handling and session fixation vulnerabilities. ======================================================================= title: Multiple Vulnerabilities in NetModule Router Software product...

9.8CVSS0.4AI score0.01529EPSS
Exploits5
Packet Storm
Packet Storm
added 2021/08/20 12:0 a.m.301 views

NetModule Router Software Password Handling / Session Fixation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities in NetModule Router Software product: NetModule Router Software NRSW vulnerable version: Before 4.3.0.113, 4.4.0.111, 4.5.0.105 fixed version:...

8.2AI score0.01529EPSS
Exploits5
Rows per page
Query Builder