UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output escapes the buffer boundaries when processing the GroupName parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Tenda AX1806 Subroutine Buffer Overflow DoS

The vulnerability of the sub65A28 function in the Tenda AX1806 router’s microprogramming system is related to the operation of writing data outside the buffer in memory when processing the parameter serverName. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Tenda AX1806 Sub Function DoS

The vulnerability of the sub4CA50 function in the microprogramming software of the Tenda AX1806 router lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure...

Tenda AX3 DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s results are stored outside of the buffer in memory when processing the mac2 parameter. Exploiting this vulnerability could allow an attacker to cause a service failur...

Tenda AX3 DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the cloneType2 parameter. Exploiting this vulnerability could allow an attacker to cause a service failure...

UTT 520W Router strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output goes beyond the buffer boundaries during the processing of the wepkey1 parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output goes beyond the buffer boundaries during the processing of the timestart parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output goes beyond the buffer boundaries during the processing of the ssid parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Tenda AX1806 Sub 65B5C Function DoS

The vulnerability of the sub65B5C function in the microprogrammed software of the Tenda AX1806 router lies in the fact that the operation’s output goes beyond the buffer boundaries in memory when processing the cloneType parameter. Exploiting this vulnerability can allow an attacker to cause a...

Tenda AX3 DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the parameter serviceName2. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Tenda AX1806 Subroutine Buffer Overflow DoS

The vulnerability of the sub65A28 function in the Tenda AX1806 router’s microprogramming system is related to the operation of writing data outside the buffer in memory when processing the parameter serviceName. Exploiting this vulnerability can allow an attacker to cause a service failure remote...

Tenda AX1806 Sub 65B5C Function DoS

The vulnerability of the sub65B5C function in the microprogrammed software of the Tenda AX1806 router lies in the fact that the operation’s output goes beyond the buffer boundaries in memory when processing the mac parameter. Exploiting this vulnerability can allow a remote attacker to cause a...

Tenda WH450 HTTP Request Handler Data Compromise

The vulnerability of the HTTP Request Handler component in the Tenda WH450 microprogramming-based router software lies in the issue of data being written outside of the buffer during the processing of the page parameter. Exploiting this vulnerability allows an attacker to compromise the...

Tenda AX1806 fromSetSysTime DoS

The vulnerability of the fromSetSysTime function in Tenda AX1806 router microprogramming software is related to buffer overflow when processing the timeZone parameter. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted request...

D-Link DIR-806A Command Injection Vulnerability

The D-Link DIR-806A is a wireless router from China's AUO D-Link. A command injection vulnerability exists in the D-Link DIR-806A version 100CNb11, which stems from the failure of the ssdpcgimain function in the SSDP Request Handler component to correctly filter constructed command special...

CVE-2026-1125

CVE-2026-1125 affects D-Link DIR-823X router firmware 250416. The issue resides in the sub_412E7C function within /goform/set_wifidog_settings; manipulating the wd_enable parameter can trigger a remote command injection. Public exploitation appears to be available. Connected sources corroborate t...

CVE-2026-1125

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...

D-Link DIR-823X command injection vulnerability

The D-Link DIR-823X is a wireless router produced by D-Link Corporation. The D-Link DIR-823X 250416 version has a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter “wdenable” in the file/goform/setwifidogsettings, which may lead to command injectio...

CVE-2021-47820

CVE-2021-47820 affects the Ubee EVW327 router. The vulnerability is a cross-site request forgery that enables remote access by a crafted page that auto-submits a form to change remote access settings to port 8080 without user consent. The provided documents do not specify affected firmware versio...

CVE-2021-47820 Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent...