CVE-2022-25554

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceId parameter...

Tenda AX1806缓冲区错误漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 formSetSysToolDDNS function suffers from a stack overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS via the ddnsEn parameter...

TP-LINK WR-886N 安全漏洞

A buffer overflow vulnerability exists in TP-LINK TL-WR886N 20190826 version 2.3.8, which originates from the /cloudconfig/routerpost/getresetpwd veirfycode function does not properly validate data boundaries when performing operations on memory, and an authenticated attacker can use this...

Tenda AX1806 缓冲区错误漏洞

Tenda AX1806 is a WiFi6 wireless router from Tenda, China. Tenda AX1806 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the ddnsUser parameter...

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

The vulnerability of NETGEAR RAX200 router’s built-in software, related to code errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR RAX200 router’s built-in software is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of NETGEAR R6400 router’s built-in software, related to improper code generation, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of NETGEAR R6400 router’s built-in software is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to compromise the integrity and accessibility of the protected information...

CVE-2022-25060

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...

CVE-2022-25062

TP-LINK TL-WR840NESV6.20180709 was discovered to contain an integer overflow via the function dmcheckString. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

The vulnerability of the microprogrammed software of the DSL-2730E wireless router arises from the lack of measures taken to protect the structure of the web page. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the microprogrammed software of the DSL-2730E wireless router exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2022-25072

TP-Link Archer A54 Archer A54USV1210111 routers were discovered to contain a stack overflow in the function DM Fillobjbystr. This vulnerability allows unauthenticated attackers to execute arbitrary code...

TotoLink A830R 操作系统命令注入漏洞

TOTOLink A830R is a wireless dual-band router from TotoLink, China.TOTOLink A830R V5.9c.4729B20191112 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

Tp-Link Archer A54缓冲区错误漏洞

Tp-Link Archer A54 is a wireless dual-band router from Pulian Technologies Co. The Tp-Link Archer A54 router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the function DM Fillobjbystr. An attacker could exploit this vulnerability to execute arbitrary...

TotoLink T10 操作系统命令注入漏洞

TOTOLink T10 is a wireless network system router from TotoLink, China.TOTOLink T10 V5.9c.5061B20200511 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

The vulnerability of the web-based application of D-Link DIR-X1860 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the web application of D-Link DIR-X1860 Wi-Fi routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created website...

CVE-2022-24355

CVE-2022-24355 affects TP-Link TL-WR940N routers (3.20.1 Build 200316 Rel.34392n) where the httpd parsing of file name extensions fails to validate the length of user-supplied data before copying to a fixed-size stack buffer, enabling network-adjacent, unauthenticated remote code execution as roo...

CVE-2022-24354

The CVE-2022-24354 entry concerns TP-Link AC1750 routers. The vulnerability stems from the NetUSB.ko module, where improper validation of user-supplied data can cause an integer overflow during buffer allocation, enabling network-adjacent attackers to execute code with root privileges. Auth is no...

CVE-2021-45401

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function...

CVE-2021-46314

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

The vulnerability of the `version_upgrade.asp` implementation in the D-Link DI-7200G V2.E1 microprogramming router software allows a hacker to execute arbitrary commands.

The vulnerability of the versionupgrade.asp implementation in the D-Link DI-7200G V2.E1 microprogramming router software is related to insufficient cleaning of input data during the processing of the path parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands...