Lucene search
+L

7606 matches found

CNNVD
CNNVD
•added 2024/07/30 12:00 a.m.•23 views

D-Link DIR-860L security vulnerabilities

The D-Link DIR-860L is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-860L REVA FIRMWARE PATCH version 1.10.B04, which originates from the Telnet service containing hardcoded credentials, which can be exploited by an attacker to remotely login to the...

9.8CVSS7.3AI score0.00776EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•9 views

CVE-2024-41610: Use of Hard-coded Credentials

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS5.9AI score0.0085EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/30 12:00 a.m.•26 views

CVE-2024-41610

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

7.1AI score0.0085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•17 views

PT-2024-29461

Name of the Vulnerable Software and Affected Versions D-Link DIR-820LW REVB FIRMWARE versions prior to 2.03.B01 TC Description The issue concerns hardcoded credentials in the Telnet service, allowing attackers to log in remotely and execute arbitrary commands. Recommendations For versions prior t...

9.8CVSS7.8AI score0.0085EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/07/30 12:00 a.m.•52 views

CVE-2024-41610

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

0.0085EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/07/30 12:00 a.m.•21 views

D-Link DIR-820LW security vulnerabilities

The D-Link DIR-820LW is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-820LW REVB FIRMWARE PATCH version 2.03.B01TC, which originates from the inclusion of hardcoded credentials in the Telnet service, allowing an attacker to remotely log...

9.8CVSS7.3AI score0.0085EPSS
SaveExploits0References2
CVE
CVE
•added 2024/07/30 12:00 a.m.•85 views

CVE-2024-41611

The D-Link DIR-860L wireless router is vulnerable to a security flaw in the REVA FIRMWARE versions 1.10 through 1.10.B04 . The Telnet service contains hardcoded credentials , which allow an attacker to perform a remote login and execute arbitrary commands . To mitigate this risk, it is recommende...

9.8CVSS7.1AI score0.00776EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•21 views

PT-2024-29462 · D Link · Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L REVA FIRMWARE versions 1.10 through 1.10.B04 Description: The issue concerns hardcoded credentials in the Telnet service, allowing remote login and execution of arbitrary commands. Recommendations: For versions 1.10 through...

9.8CVSS9.7AI score0.00776EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/30 12:00 a.m.•61 views

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

0.00776EPSS
SaveExploits0References2
CVE
CVE
•added 2024/07/30 12:00 a.m.•75 views

CVE-2024-41610

The D-Link DIR-820LW REVB wireless router is vulnerable to remote command execution due to hardcoded credentials within the Telnet service . An attacker can exploit this flaw to log in remotely and perform arbitrary commands on the device. This issue specifically affects FIRMWARE PATCH 2.03.B01_T...

9.8CVSS7.2AI score0.0085EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•9 views

CVE-2024-41611: Use of Hard-coded Credentials

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS8.2AI score0.00776EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/07/29 8:51 a.m.•36 views

Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series

Overview FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain multiple vulnerabilities listed below. Initialization of a Resource with an Insecure Default CWE-1188 - CVE-2024-31070 Active Debug Code CWE-489 - CVE-2024-36475 OS Command Injection CWE-78 -...

10CVSS7.9AI score0.74339EPSS
SaveExploits2References10
osv_cve
osv_cve
•added 2024/07/29 4:15 a.m.•20 views

CVE-2024-7181

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. This vulnerability affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument telnetenabled leads to command injection. The attack can be initiated remotely. The...

8.8CVSS6.3AI score0.03086EPSS
SaveExploits1References4
CNVD
CNVD
•added 2024/07/29 12:00 a.m.•28 views

TOTOLINK A3600R cstecgi.cgi file setTelnetCfg function command injection vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a command injection vulnerability that originates from improper handling of the telnetenabled parameter in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. An...

8.8CVSS6.5AI score0.03086EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/29 12:00 a.m.•46 views

TOTOLINK A3600R Hardcoded Password Vulnerability

The TOTOLINK A3600R is a wireless router. The TOTOLINK A3600R suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the Telnet service, which can be exploited by an attacker to cause tampering of the device configuration, disclosure of sensitive...

8.8CVSS6.7AI score0.00559EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/29 12:00 a.m.•20 views

TOTOLINK A3100R Command Injection Vulnerability

The TOTOLINK A3100R is a wireless router. The TOTOLINK A3100R suffers from a command injection vulnerability that stems from improper handling of the telnetenabled parameter. An attacker can exploit this vulnerability to obtain sensitive information...

8.8CVSS7AI score0.03086EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/07/29 12:00 a.m.•24 views

TOTOLINK A3600R Command Injection Vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a command injection vulnerability that originates from improper handling of the telnetenabled parameter in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. An...

8.8CVSS7.5AI score0.03086EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/07/28 3:15 p.m.•22 views

CVE-2024-7159

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

8.8CVSS5.3AI score0.00559EPSS
SaveExploits1References4
NVD
NVD
•added 2024/07/28 3:15 p.m.•38 views

CVE-2024-7159

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

8.8CVSS0.00559EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/28 2:31 p.m.•28 views

CVE-2024-7159 TOTOLINK A3600R Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

5.5CVSS5.8AI score0.00559EPSS
SaveExploits1References4
Rows per page
Query Builder