Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51421)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be affected by a command injection vulnerability in the...

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51423)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be vulnerable to a command injection vulnerability in the...

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51429)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be affected by a command injection vulnerability in the...

CVE-2022-29730

CVE-2022-29730 affects USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36. The issue is hard-coded credentials for the highest privileged account (USR user) with password www.usr.cn, which cannot be changed via normal device operation. This credential exposure enables full compromise of the de...

CVE-2022-29730: Use of Hard-coded Credentials

USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device...

PT-2022-19803

Name of the Vulnerable Software and Affected Versions USR IOT 4G LTE Industrial Cellular VPN Router version 1.0.36 Description The issue concerns hard-coded credentials for the highest privileged account, which cannot be changed during normal device operation. Recommendations For USR IOT 4G LTE...

USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 Remote Root Backdoor Exploit

The USR IOT industrial router is vulnerable to hard-coded credentials within its Linux distribution image. These sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the device. Affected versions include 1.0.36 and 1.2.7. !/usr/bin/env python...

Mitsubishi Electric Air Conditioning Systems

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: Multiple Air Conditioning Systems Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability may...

Tengda MicroEnterprise Integration Gateway has a Logic Flaw Vulnerability

MicroEnterprise All-in-One Gateway is a VPN router under the Tenda brand. A logic flaw vulnerability exists in the Tengda Micro Enterprise Integrated Gateway, which can be exploited by an attacker to gain unauthorized access...

Binary Vulnerability in H3C ER3100 VPN Router

The H3C ER3100 is a high-performance VPN router targeted at the SMB market with Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A binary vulnerability exists in the H3C ER3100 VPN Router, which can be exploited by attackers to...

Denial of Service Vulnerability in H8922 4G Wireless Router

Shenzhen Hongdian Technology Co., Ltd H8922 supports dual-SIM card backup; built-in WiFi module, supports wired and wireless, wireless and wireless backup each other; richer interfaces and better expandability 4 LAN ports, 1 WAN port; it is a feature-rich, widely used industrial-grade VPN router...

CVE-2021-1289 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP...

CVE-2021-1292: External Control of Assumed-Immutable Web Parameter

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP...

Security Vulnerabilities in Multiple Cisco Products

Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...

Denial of Service Vulnerability in TP-Link TL-WAR1300L

The TL-WAR1300L is an enterprise-grade wireless VPN router from TP-Link. The TP-Link TL-WAR1300L has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service attack...

Denial of Service Vulnerability in TP-Link TL-WVR1300L

The TL-WVR1300L is an enterprise-grade wireless VPN router from TP-Link. The TP-Link TL-WVR1300L suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

Denial of Service Vulnerability in TP-Link TL-WVR1200L

The TL-WVR1200L is an enterprise-grade wireless VPN router from TP-Link. The TP-Link TL-WVR1200L suffers from a denial of service vulnerability, which can be exploited by attackers to cause a denial of service attack...

TP-Link TL-WVR1300G has a denial of service vulnerability

The TL-WVR1300G is an enterprise-grade wireless VPN router from TP-Link. The TP-Link TL-WVR1300G suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

TP-Link TL-R473GP-AC in Denial of Service Vulnerability

TL-R473GP-AC is TP-LINK's PoE-AC all-in-one VPN router product developed specifically for environments such as small and micro businesses, offices and villas. TP-Link TL-R473GP-AC is vulnerable to a denial of service vulnerability. An attacker can exploit the vulnerability to cause a denial of...

Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41220)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...