Victure WR1200 WiFi Router Command Injection (CVE-2021-43283)

A command injection vulnerability exists in Victure WR1200 WiFi Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-4144

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

CVE-2021-4144

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

CVE-2021-4144

The CVE-2021-4144 entry applies to TP-Link TL-WR802N V4(JP) with firmware versions prior to 211202, which are vulnerable to an OS command injection. According to JVN, exploitation requires legitimate access to the device web interface, allowing an authenticated user to execute OS commands. ENISA/...

PT-2021-5665

Name of the Vulnerable Software and Affected Versions TP-Link wifi router TL-WR802N V4JP versions prior to 211202 Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute arbitrary...

CVE-2021-4144: Improper Neutralization of Special Elements used in an OS Command

TP-Link wifi router TL-WR802N V4JP, with firmware version prior to 211202, is vulnerable to OS command injection...

OnCell G3470A-LTE Series Industrial Modem Privilege Escalation

The vulnerabilities of microprogrammed software in industrial modems of the OnCell G3470A-LTE Series, WDR-3124A Series, microprogrammed software in Wi-Fi routers of the TAP-323 Series, WAC-1001 Series, and WAC-2004 Series are related to the lack of measures taken to neutralize special elements us...

Tenda AC11 Stack Buffer Overflow Vulnerability

The Tenda AC11 is an AC1200 dual-band Gigabit WiFi router. A stack buffer overflow vulnerability exists in /goform/setportList in the Tenda AC11 02.03.01.104CN and earlier firmware. An attacker can exploit this vulnerability to execute arbitrary code on the system via a specially crafted post...

NETGEAR Wi-Fi Router Authentication DoS

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, models D6200, D7000, R6020, R6080, R6050, and JR6150, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

CVE-2020-9241

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1H563SP1C00,10.0.3.1H563SP21C233 have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device...

PT-2020-12685

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 version 2.5.1.106 NETGEAR Outdoor Satellite RBS50Y version 2.5.1.106 NETGEAR Pro Tri-Band Business WiFi Router SRR60 version 2.5.1.106 Description An issue allows an unauthenticated...

CVE-2020-11549: Use of Hard-coded Credentials

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting...

CVE-2020-11550: Undefined Security Weakness

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of sensitive/arbitra...

CVE-2020-11551: Improper Authentication

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi...

PT-2020-12684

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 version 2.5.1.106 NETGEAR Outdoor Satellite RBS50Y AC3000 version 2.5.1.106 NETGEAR Pro Tri-Band Business WiFi Router SRR60 AC3000 version 2.5.1.106 Description An issue allows ...

PT-2020-5396

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 version 2.5.1.106 NETGEAR Outdoor Satellite RBS50Y version 2.5.1.106 NETGEAR Pro Tri-Band Business WiFi Router SRR60 AC3000 version 2.5.1.106 Description The issue is related to the us...

CVE-2019-17137

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings...

CVE-2019-5072

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...

Netgear WiFi Router JWNR2010v5 / R6080 Authentication Bypass

Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...

Netgear WiFi Router JWNR2010v5 / R6080 - Authentication Bypass

Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...