188 matches found
The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication process flaws, which allow attackers to exploit these vulnerabilities to gain increased privileges.
The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...
The vulnerability of the microprogrammed Wi-Fi router software models R6900P, R7000P, R7900P, R7960P, R8000P, RAX75, and RAX80 lies in the lack of authentication procedures, which allows attackers to escalate their privileges.
The vulnerability of the microprogrammed Wi-Fi router software models R6900P, R7000P, R7900P, R7960P, R8000P, RAX75, and RAX80 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Victure WR1200 WiFi Router Command Injection (CVE-2021-43283)
A command injection vulnerability exists in Victure WR1200 WiFi Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2021-4144
TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...
CVE-2021-4144
TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...
CVE-2021-4144
The CVE-2021-4144 entry applies to TP-Link TL-WR802N V4(JP) with firmware versions prior to 211202, which are vulnerable to an OS command injection. According to JVN, exploitation requires legitimate access to the device web interface, allowing an authenticated user to execute OS commands. ENISA/...
The vulnerability of microprogrammed software in industrial modems of the OnCell G3470A-LTE Series and WDR-3124A Series, as well as in microprogrammed software for Wi-Fi routers of the TAP-323 Series, WAC-1001 Series, and WAC-2004 Series, arises from the lack of measures taken to neutralize special elements used in operating systems. This allows attackers to enhance their privileges.
The vulnerabilities of microprogrammed software in industrial modems of the OnCell G3470A-LTE Series, WDR-3124A Series, microprogrammed software in Wi-Fi routers of the TAP-323 Series, WAC-1001 Series, and WAC-2004 Series are related to the lack of measures taken to neutralize special elements us...
Tenda AC11 Stack Buffer Overflow Vulnerability
The Tenda AC11 is an AC1200 dual-band Gigabit WiFi router. A stack buffer overflow vulnerability exists in /goform/setportList in the Tenda AC11 02.03.01.104CN and earlier firmware. An attacker can exploit this vulnerability to execute arbitrary code on the system via a specially crafted post...
The vulnerability of NETGEARās Wi-Fi router software, including models D6200, D7000, R6020, R6080, R6050, and JR6150, stems from deficiencies in authentication mechanisms. This allows attackers to trigger service interruptions.
The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, models D6200, D7000, R6020, R6080, R6050, and JR6150, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
CVE-2019-17137
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings...
CVE-2019-5072
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...
Netgear WiFi Router JWNR2010v5 / R6080 Authentication Bypass
Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...
Netgear WiFi Router JWNR2010v5 / R6080 - Authentication Bypass
Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...
CVE-2019-7564
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wlsecurity2G.asp URI, the attacker can change the password of the Wi-FI...
Authentication flaw
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wlsecurity2G.asp URI, the attacker can change the password of the Wi-FI...
CVE-2019-7564
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wlsecurity2G.asp URI, the attacker can change the password of the Wi-FI...
CVE-2019-7564
The CVE-2019-7564 entry concerns Shenzhen Coship WM3300 WiFi Router devices (notably 5.0.0.55). A password-reset function for the Wireless SSID does not require authentication, allowing an unauthenticated POST to regx/wireless/wl_security_2G.asp to change the Wi-Fi password. Red Hat and other fee...
JioFi 4G M2S 1.0.2 Cross Site Scripting
Exploit Title: cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. Exploit Author: Vikas Chaudhary Date: 21-01-2019 Vendor Homepage: https://www.jio.com/ Hardware Link:...
Jiofi 4 (JMR 1140 Amtel_JMR1140_R12.07) - Reflected Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Jiofi 4 JMR 1140 Reflected Cross Site Scripting Exploit Author: Ronnie T Baby Contact:https://www.linkedin.com/in/ronnietbaby Vendor Homepage: www.jio.com Hardware Link: https://www.jio.com/shop/en-in/jmr-1140/p/491193574...
Jiofi 4 (JMR 1140 Amtel_JMR1140_R12.07) - CSRF (Password Disclosure) Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Jiofi 4 JMR 1140 CSRF To View Wi-fi Password Exploit Author: Ronnie T Baby Contact:https://www.linkedin.com/in/ronnietbaby Vendor Homepage: www.jio.com Hardware Link: https://www.jio.com/shop/en-in/jmr-1140/p/491193574...