PT-2019-6976 · D Link · D-Link Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue concerns a PHP File Inclusion in the router's xml file. This affects the D-Link DIR-865L router. Recommendations: At the moment, there is no information about a newer...

NETGEAR JNR1010 Cross-Site Scripting Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in versions prior to NETGEAR JNR1010 1.0.0.32, which can be exploited by an attacker to execute client-side code...

ASUS RT-N10+ 2.0.3.4 CSRF / XSS / Command Execution

Exploit Title: XSS And CSRF to RCE in ASUS RT-N10 Repeater Mode Date: 13/10/2019 Exploit Author: Matheus Vrech Vendor Homepage: https://www.asus.com/ Version: ASUS RT-N10+, Firmware: 2.0.3.4 Tested on: Archlinux, Windows 10 XSS: when someone change router to repeater mode you should be able to...

Weak Password Vulnerability in Huasan ER5200 Router

ER5200 is a high-performance Gigabit downstream router from H3C, which is targeted at the SMB market for Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A weak password vulnerability exists in the H3C ER5200 router, which can b...

LG-ERICSSON LN202-003H HomeHub Router Remote Configuration Disclosure

!/usr/bin/perl -w LG-ERICSSON LN202-003H HomeHub Router Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor Donev is not...

CVE-2019-16412

The CVE concerns a vulnerability in Tenda N301 wireless routers affecting the goform/setSysTools handler. A zero wanMTU value can be submitted and, unlike in the GUI which blocks it, may trigger a device crash. The issue is documented with the same description across NVD/Red Hat/NVD mirrors, conf...

The vulnerability of TP-Link’s microprogrammed software in routers, which stems from insufficient validation of input data, allows attackers to bypass the separation between the host network and the guest network.

The vulnerability of TP-Link’s microprogrammed routing software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to bypass the separation between the host network and the guest network using the DHCP protocol...

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR operating systems is related to errors in the processing of IS-IS protocol data packets. Exploiting this vulnerability can allow a malicious actor to cause service failures...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-30426)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the D-Link DIR-823G. The vulnerability arises from a failure of a network system or product to properly filter specific elements of externally entered data during the constructio...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-30427)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the D-Link DIR-823G. The vulnerability stems from a failure of a network system or product to properly filter specific elements of externally input data during the construction o...

TP-Link M7350 V3 Command Injection Vulnerability (CNVD-2019-31307)

The TP-Link M7350 is a portable wireless router device from China P&L TP-Link. A command injection vulnerability exists in the TP-Link M7350 V3, which can be exploited by an attacker to execute illegal commands...

D-Link DIR-823G Access Control Error Vulnerability

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in the D-Link DIR-823G. An attacker can exploit this vulnerability to hijack DNS service configuration information for all clients in the WLAN...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability (CNVD-2019-22208)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the ssi binary in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properl...

The vulnerability of component Acl.asp in the D-Link DSL-3782 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of component Acl.asp in the D-Link DSL-3782 router microprogramming system is related to insufficient checking of arguments passed to certain CLI command-line interface commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the...

The vulnerability of D-Link DIR-818LW router’s microprogramming software lies in the lack of measures to clean incoming data, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-818LW router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Command Injection Vulnerability in Multiple D-Link Products

The D-Link DIR-845, among others, is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the soap.cgi?service=WANIPConn1 URL in multiple D-Link products. The vulnerability stems from a network system or product not properly filtering specific elements o...

Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the web-based management interface in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to access information in the syslog file...

iBall Baton iB-WRB302N Information Disclosure Vulnerability

The iBall Baton iB-WRB302N is a wireless router from iBall India. A vulnerability with trust management issues exists in the iBall Baton iB-WRB302N version 20122017. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can...

CVE-2019-12195

CVE-2019-12195 affects TP-Link TL-WR840N v5 00000005. The vulnerability is a cross‑site scripting flaw in the device’s web interface that can be triggered via the network name. Exploitation requires the attacker to log in by breaking the password (e.g., via THC-HYDRA) and access the admin login p...