Huawei WS331a Cross-Site Request Forgery Vulnerability

The Huawei WS331a is a mini wireless router from the Chinese company Huawei. The Huawei WS331a suffers from a cross-site request forgery vulnerability that allows a remote attacker to construct a malicious URI, trick the user into parsing it, and can perform malicious actions in the context of th...

Hitron CGNV4 Router Security Bypass Vulnerability

Hitron CGNV4 is a router product from Hitron. A security bypass vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC, which can be exploited by attackers to obtain sensitive information and perform unauthorized operations...

Hitron CGNV4 Router Cross-Site Request Forgery Vulnerability Vulnerability

Hitron CGNV4 is a router product from Hitron. A cross-site request forgery vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC. An attacker can exploit the vulnerability to steal cookie-based authentication...

ZyXEL P660HN-T v1 Router Unauthenticated Remote Command Execution Vulnerability

The ZyXEL P660HN-T v1 is a router manufactured by Hutchinson Technology. The ZyXEL P660HN-T v1 router suffers from an unauthenticated remote command execution vulnerability. Command injection in the remotehost parameter and the presence of a default account on the device allow an unauthenticated...

ASUS DSL-N55U Router Cross-Site Scripting Vulnerability

ASUS DSL-N55U is a dual-band wireless router product from ASUS. Cross-site scripting vulnerabilities exist in ASUS DSL-N55U Router version 3.0.0.4.3762736 that stem from the program failing to properly filter user-submitted input. An attacker could execute arbitrary code in the context of the...

The vulnerability of the microprogrammed software of the D–Link DSR–250 router allows a malicious individual to intercept network traffic.

The microprogrammed software of the D-Link DSR-250 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

The vulnerability of the microprogramming software of the D–Link DSR–500 router allows a malicious individual to obtain the user password.

To store passwords, the DES encryption algorithm with a salt is used. This results in a password length limitation of 8 characters the remaining characters are discarded...

The vulnerability of Juniper SRX 240 router microprogramming software allows a hacker to execute arbitrary code.

The Juniper SRX 240 router software contains a vulnerability that allows an attacker to execute arbitrary code as a result of a “clickjacking” attack...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.

The web interface of the router allows for the execution of a limited number of system commands ping, traceroute, dnslookup. However, it is possible to execute any command that is separated by a system separator from the allowed commands...

The vulnerability of the microprogramming software of Cisco Linksys WRT350N routers allows malicious individuals to gain remote access to the device.

The Cisco Linsys WRT350N router has a default password of “Admin” for the administrator account, which allows a malicious individual to gain remote access to this device...

The vulnerability of the microprogrammed routing software of the D–Link DSR–1000 allows a malicious actor to intercept network traffic.

The microprogrammed software of the D-Link DSR-1000 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

Cisco EPC3928 Denial of Service Vulnerability (CNVD-2016-04559)

Cisco EPC3928 is a wireless router product from Cisco USA. A security vulnerability exists in the goform/WClientMACList on the Cisco EPC3928. A remote attacker can exploit this vulnerability to cause a denial of service device crash with the help of a long 'hsortWireless' parameter...

I-O DATA DEVICE ETX-R Denial of Service Vulnerability

The I-O DATA DEVICE ETX-R is a router product from I-O DATA DEVICE Japan. A denial of service vulnerability exists in the I-O DATA DEVICE ETX-R, which allows remote attackers to exploit the vulnerability by submitting a special request for a denial of service attack...

Cisco RV110W/RV130W/RV215W Router Cross-Site Scripting Vulnerability

The Cisco RV130W Wireless-N is a multifunction VPN router; the Cisco RV110W/RV215W is a router that combines wired/wireless network connectivity, VPN, and firewall features. A cross-site scripting vulnerability exists in the Cisco RV110W/RV130W/RV215W routers, which can be exploited by a remote...

CVE-2016-5365

Stack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier allows remote attackers to execute arbitrary commands with root privileges via unspecified vectors, aka HWPSIRT-2016-05051...

Huawei WS851 Injection Vulnerability

The Huawei WS851 is a wireless router product from Huawei China. A security vulnerability exists in Huawei WS851 versions prior to 1.1.21.1, which stems from the program not restricting ports. An attacker can exploit this vulnerability to inject arbitrary files...

WN-G300R Series vulnerable to cross-site scripting

Overview WN-G300R Series provided by I-O DATA DEVICE, INC. contains a cross-site scripting vulnerability. WN-G300R Series provided by I-O DATA DEVICE, INC. is a wireless LAN router. WN-G300R Series contains a stored cross-site scripting vulnerability CWE-79. Satoshi Ogawa of Mitsui Bussan Secure...

ZyXel WAP3205 Cross-Site Scripting Vulnerability

ZyXEL WAP3205 is a wireless broadband router from ZyXEL Technology. The ZyXel WAP3205 suffers from a cross-site scripting vulnerability that could allow an authenticated attacker to insert persistent malicious script into a page...

RomPager 4.34 Authentication Bypass

Title: Misfortune Cookie Exploit RomPager = 4.34 router authentication remover Date: 17/4/2016 CVE: CVE-2015-9222 http://mis.fortunecook.ie Vendors: ZyXEL,TP-Link,D-Link,Nilox,Billion,ZTE,AirLive,... Vulnerable models: http://mis.fortunecook.ie/misfortune-cookie-suspected-vulnerable.pdf Versions...

Tools recommended: Scanner Routerhunter, the router vulnerability scanner-vulnerability warning-the black bar safety net

! 0×0 0 Preface We will introduce a Automatic mining router vulnerability test tools, it can be automated on the Internet a wide range of search contains a vulnerability in the routing test, further confirmed these vulnerabilities, which relates to the D-link multiple router. The tool is using...