TP-Link Archer BE230 security vulnerabilities

The TP-Link Archer BE230 is a wireless router produced by TP-Link Corporation. The TP-Link Archer BE230 v1.2 1.2.4 Build 20251218 rel.70420 versions had security vulnerabilities. These vulnerabilities stemmed from command injection in the VPN server configuration module, which could allow attacke...

D-Link DSL-124 Router Authentication Bypass Information Disclosure

The vulnerability of the D-Link DSL-124 router’s microprogramming software is related to the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a POST request...

Tenda W30E Default Password Full Control

The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E relates to the use of a default password. Exploiting this vulnerability could allow an attacker to gain full control over the device remotely...

Tenda W30E Information Disclosure Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. The Tenda W30E suffers from an information disclosure vulnerability that can be exploited by an attacker to cause credential disclosure...

Tenda W30E XSS

The vulnerability of the microprogrammed wireless Wi-Fi router Tenda W30E is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Tenda AX-1806 Sub Function DoS

The vulnerability of the sub60CFC function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failure...

Tenda AX-1803 DoS

The vulnerability of the formfastsettingwifiset function in the Tenda AX-1803 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

D-Link DWR-M961 has a command injection vulnerability

The D-Link DWR-M961 is a router produced by D-Link Corporation. Version 1.1.47 of the D-Link DWR-M961 contains a command injection vulnerability. This vulnerability arises from incorrect handling of the parameter fotaurl in the file /boafrm/formLtefotaUpgradeQuectel, which may lead to command...

Tenda W30E Brute Force

The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a remote attacker to carry out an attack using brute-force methods...

Tenda W30E Information Disclosure

The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E lies in the insertion of confidential information into the transmitted data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to the protected information...

Tenda W30E security vulnerabilities

The Tenda W30E is a router from the Chinese company Tenda. The Tenda W30E suffers from an information disclosure vulnerability that can be exploited by an attacker to cause credential disclosure...

Tenda W30E cross-site scripting vulnerability

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 had a cross-site scripting vulnerability. This vulnerability stemmed from insufficient input validation in user-created functions, which could lead to storage-based cross-si...

Tenda W30E Cross-Site Request Forgery Vulnerability

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 had a cross-site request forgery vulnerability. This vulnerability stemmed from the lack of cross-site request forgery protection in the management endpoints, which could...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 have security vulnerabilities. These vulnerabilities stem from the use of predefined default passwords, which may allow attackers to gain access to the management interface...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. The Tenda W30E V2 and earlier versions have security vulnerabilities. These vulnerabilities stem from an authorization flaw in the user management API, which may allow users with low privileges to change the password of administrat...

Tenda W30E security vulnerabilities

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 have security vulnerabilities. These vulnerabilities stem from the use of insecure cross-device resource sharing policies by management endpoints, which may allow attackers ...

Wavlink Router Set Sys Adm Command Execution

The vulnerability of the setsysadm function in the microprogramming-based routing software of Wavlink WL-WN530H4 lies in the lack of measures taken to sanitize data at the control level when processing the newpass parameter. Exploiting this vulnerability allows a remote attacker to execute...

D-link DIR-823X Router Arbitrary Command Execution

The vulnerability of the sub412E7C function in D-link DIR-823X router microprogramming software is related to the failure to take measures to neutralize special elements during the processing of the wdenable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

EUVD-2026-3650

Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without...

Tenda AX1803 security vulnerabilities

The Tenda AX1803 is a dual-band Gigabit WIFI6 router produced by the Chinese company Tenda. The Tenda AX1803 v1.0.0.1 version contains a security vulnerability. This vulnerability stems from a stack overflow in the security5g parameter within the sub727F4 function, which may lead to a...