883 matches found
CVE-2024-7332
A vulnerability was found in TOTOLINK CP450 4.1.0cu.747B20191224. It has been classified as critical. This affects an unknown part of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack...
CVE-2024-1786
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer overflow. The attack may be...
CVE-2024-8162
A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. It is possible to launch the attack...
PT-2025-1302
Name of the Vulnerable Software and Affected Versions Zyxel VMG4325-B10A firmware version 1.00AAFR.4C0 20170615 Description A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware allows an authenticated attacker to execut...
CVE-2024-54457
Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to enable telnet service...
CVE-2024-54457
FXC AE1021 and AE1021PE (firmware 2.0.10 and earlier) contain an undocumented feature issue that may allow a logged‑in user to enable the telnet service. Root cause: inclusion of undocumented features in the firmware. Affected products: AE1021 and AE1021PE; affected versions: 2.0.10 and earlier. ...
CVE-2024-54457
Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to enable telnet service...
CVE-2024-54457
Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to enable telnet service...
PT-2024-36341 · Ae1021Pe +1 · Ae1021Pe +1
Name of the Vulnerable Software and Affected Versions: AE1021 versions 2.0.10 and earlier AE1021PE versions 2.0.10 and earlier Description: The issue exists due to the inclusion of undocumented features or 'chicken bits' in the firmware, which may allow a logged-in user to enable the telnet...
CVE-2024-53937
An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...
CVE-2024-53938
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve full control over the router remotely witho...
CVE-2024-53938
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve full control over the router remotely witho...
CVE-2024-53938
CVE-2024-53938 affects Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0). The TELNET service is enabled by default and exposed on the LAN; the root account is accessible without a password, allowing attackers to gain full control remotely without authentication. This is d...
Victure RX1800 WiFi 6 安全漏洞
The Victure RX1800 WiFi 6 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 WiFi 6 that stems from the TELNET service being enabled and exposed over the LAN. The root account can be accessed without a password, allowing an attacker to remotely take full...
CVE-2024-53937
Affects Victure RX1800 WiFi 6 Router (EN_V1.0.0_r12_110933, hardware 1.0). TELNET is enabled by default with admin/admin credentials and exposed over the LAN, allowing attackers to execute arbitrary commands with root-level permissions. The TELNET password is dictated by the current GUI password,...
D-Link DSL6740C 操作系统命令注入漏洞
The D-Link DSL6740C is a wireless VDSL router from China's AUO D-Link. The D-Link DSL6740C suffers from an operating system command injection vulnerability, which can be exploited by a remote attacker with administrator privileges to inject and execute arbitrary system commands via specific...
The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers allows a intruder to gain unauthorized access to confidential information.
The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the presence of undocumented configuration commands. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information by forcing the telnet service to operate...
The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers allows a intruder to gain unauthorized access to confidential information.
The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to confidential information by forcing the telnet service to operate...
The vulnerability of the file /squashfs-root/web_cste/cgi-bin/product.ini of the TOTOLink T10 router microprogramming software allows a intruder to gain unauthorized access to the Telnet service.
The vulnerability of the file /squashfs-root/webcste/cgi-bin/product.ini of the TOTOLink T10 microprogramming router software is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the Telnet service...