CVE-2015-9550

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface...

CVE-2015-9550

CVE-2015-9550 affects TOTOLINK A850R-V1 (1.0.1-B20150707.1612) and F1-V2 (1.1-B20150708.1646). A crafted packet sent to the WAN interface can cause the WAN web management interface to be opened. Root cause: reception of a specific hel,xasf packet triggering exposure of the WAN UI. Impact describe...

CVE-2015-9550

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface. Recent assessments: Assessed Attacker Value...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

Design/Logic Flaw

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

CVE-2020-6879 affects ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. The web management UI allows configuring a static prefix, but the front-end restriction can be bypassed by crafting a POST request to the static routing rule creation interface. The backend does not adequately validate a...

Cisco DNA Spaces Connector Command Injection Vulnerability

Cisco DNA Spaces: Connector is used to connect Cisco DNA Spaces to a Cisco wireless controller. A command injection vulnerability exists in the Web management interface of the Cisco DNA Spaces Connector version 2.2 and earlier. The vulnerability stems from insufficient validation of user-supplied...

Vmware VMWare SD-WAN Orchestrator Input Validation Error Vulnerability

Vmware VMWare SD-WAN Orchestrator is a software from Vmware that orchestrates network data flows in a software-defined network architecture. The software provides Web pages to visualize and manage users, gateways, and authentication. An input validation error vulnerability exists in VMware SD-WAN...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to an incorrect path name limitation for accessing the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

Cisco SD-WAN vManage Path Traversal Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A path traversal vulnerability exists in the Web management interface of Cisco SD-WAN vManage 20.1.12 and earlier. The vulnerability stems from insufficient authentication of HTTP requests...

Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2020-70857)

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. A cross-site scripting vulnerability exists in the Web management interfa...

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

CVE-2020-27690

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes...

Buffer overflow

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes...

CVE-2020-27689

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a...

Design/Logic Flaw

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a...

CVE-2020-27690

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes...