Cisco CVR100W Wireless-N VPN Router Security Restriction Bypass Vulnerability

The CISCO CVR100W is a combination of wired/wireless network connectivity, VPN, firewall and many other features. A security vulnerability exists in the Remote Management Access Control List feature of the Cisco CVR100W Wireless-N VPN Router, where an unauthenticated remote attacker bypasses the...

WN-G300R3 OS Command Injection Vulnerability

The WN-G300R3 is a wireless LAN router device from I-O DATA DEVICE. The WN-G300R3 suffers from an OS command injection vulnerability that can be exploited by an attacker to execute arbitrary OS commands on the product...

WN-G300R3 Stack Buffer Overflow Vulnerability

The WN-G300R3 is a wireless LAN router device from I-O DATA DEVICE. The WN-G300R3 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary OS commands on the product...

WN-G300R3 vulnerable to stack based buffer overflow

Overview WN-G300R3 provided by I-O DATA DEVICE, INC. contain a stack based buffer overflow vulnerability. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

The vulnerability of Huawei AR3200 router’s micro-programming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Huawei AR3200 router’s micro-programming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted network packet...

D-Link DIR-600M Rev. Cx Cross-Site Request Forgery Vulnerability

The D-Link DIR-600M Rev. Cx is a wireless router product from AUO. A cross-site request forgery vulnerability exists in the D-Link DIR-600M Rev. Cx. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious operations in the context of the...

D-Link DWR-932B router vulnerable (CNVD-2017-01664)

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker could exploit the vulnerability to bypass security restrictions...

D-Link DIR-600M - Cross-Site Request Forgery

Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: C1 Firmware version: 3.03 Tested on:All...

D-Link DWR-932B Command Injection Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary commands...

NETGEAR WNR2000v5 router authentication bypass vulnerability

The NETGEAR WNR2000v5 router is a popular router device. An authentication bypass vulnerability exists in the NETGEAR WNR2000v5 router. An attacker can use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...

Multiple NETGEAR routers are vulnerable to administrator password information leaks

The NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 are wireless router products from Netgear, Inc. Information disclosure vulnerabilities exist in several NETGEAR products. For example, the models in question have an open Intern...

NETGEAR WNR2000 Router Heap Buffer Overflow Vulnerability

The Netgear WNR2000 is a wireless router product from the American company Netgear. A heap buffer overflow vulnerability exists in the NETGEAR WNR2000 router. Since the router HTTP server handles .cgi files by way of URLs, an attacker exploiting the vulnerability could cause a denial of service...

Tenda/Dlink/TP-LINK TD-W8961ND 'DHCP' Cross-Site Scripting Vulnerability

Tenda/Dlink/TP-LINK are all line router manufacturers that have released numerous models of router products. A cross-site scripting vulnerability exists in Tenda/Dlink/TP-LINK TD-W8961ND 'DHCP'. Allows an attacker to inject malicious script code on the application side to manipulate the router dh...

CVE-2016-6438

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS...

Backdoor Account Vulnerability in Telnet Service on D-Link DWR-932B LET Router

The D-Link DWR-932B LET is a wireless router. A backdoor account vulnerability exists in the Telnet service of the D-Link DWR-932B LET router. Since the D-Link wireless router runs Telnet service with two hard-coded secret accounts admin:admin and root:1234 by default, an attacker can exploit the...

D-Link DWR-932B LET Router WPS PIN Generator Vulnerability

The D-Link DWR-932B LET is a wireless router. A vulnerability exists in the WPS PIN generator of the D-Link DWR-932B LET router. Since a user can temporarily generate a new WPS PIN via the router's web management interface, an attacker can exploit the vulnerability to use the PIN to access a...

TP-Link Archer CR-700 Cross-Site Scripting Vulnerability

The TP-Link Archer CR-700 is a router. A cross-site scripting vulnerability exists in the TP-Link Archer CR-700. A remote attacker can exploit this vulnerability by importing a configuration file to change the router's configuration...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

Cisco IOS XR on NCS 6000 Denial of Service Vulnerability

Cisco IOS XR on NCS 6000 is an operating system from Cisco that runs on 6000 series router devices. A denial of service vulnerability exists in Cisco IOS XR versions 6.0 and 6.0.1 on Cisco NCS 6000 devices. A remote attacker can exploit this vulnerability by sending specially crafted OSPFv3 packe...

ASUS RT-N10E Cross-Site Scripting Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A cross-site scripting vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to launch a cross-site scripting attack...