D-Link DIR-816 A2 /goform/form2AdvanceSetup.cgi Access Control Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. An access control error vulnerability exists in D-Link DIR-816 A2 version 1.10CNB05R1B011D88210, which stems from improper access control in /goform/form2AdvanceSetup.cgi. An attacker can exploit this vulnerability to set the 2.4...

NEC Aterm多款产品 跨站脚本漏洞

The NEC Aterm WG2600HS is a wireless router from Nippon Electric NEC. A cross-site scripting vulnerability exists in various NEC Aterm products, which stems from susceptibility to cross-site scripting attacks. The following products and versions are affected: WG2600HS Ver.1.7.2 and earlier,...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys USA. A security vulnerability exists in Linksys E5600 Ver.1.1.0.26. An attacker can exploit the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload with the desc parameter...

Wavlink AC3000 login.cgi set_sys_init() command injection vulnerabilities

Talos Vulnerability Report TALOS-2024-2018 Wavlink AC3000 login.cgi setsysinit command injection vulnerabilities January 14, 2025 CVE Number CVE-2024-39759,CVE-2024-39761,CVE-2024-39760 SUMMARY Multiple OS command injection vulnerabilities exist in the login.cgi setsysinit functionality of Wavlin...

WAVLINK AC3000 安全漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. An external configuration control vulnerability exists in the WAVLINK AC3000, which can be exploited by attackers to cause a privilege bypass...

Wavlink AC3000 internet.cgi set_add_routing() command injection vulnerabilities

Talos Vulnerability Report TALOS-2024-2020 Wavlink AC3000 internet.cgi setaddrouting command injection vulnerabilities January 14, 2025 CVE Number CVE-2024-39764,CVE-2024-39765,CVE-2024-39763,CVE-2024-39762 SUMMARY Multiple OS command injection vulnerabilities exist in the internet.cgi...

WAVLINK AC3000 安全漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. An external configuration control vulnerability exists in the WAVLINK AC3000, which can be exploited by attackers to cause a privilege bypass...

TP-LINK WR845N 安全漏洞

The TP-LINK WR845N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK WR845N version V4201214, version V4200909, and version V4190219, which originates from weak default credentials containing the administrator account...

TP-LINK WR845N 安全漏洞

The TP-LINK WR845N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK WR845N version V4200909 and version V4190219, which originates from transmitting user credentials in plain text after performing a restore of factory settings...

NETGEAR RAX30 Buffer Overflow Vulnerability

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a buffer overflow vulnerability that stems from a lack of validation of the length of user-supplied data, which can be exploited by an attacker to execute arbitrary code...

Tenda AC6V2 Stack Buffer Overflow Vulnerability

Tenda AC6V2 is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC6V2. The vulnerability stems from insufficient checking of the length or boundaries of input data to overwrite adjacent memory areas. An attacker could use this vulnerability to execute...

I-O Data Device UD-LT1和I-O Data Device UD-LT1/EX 安全漏洞

I-O Data Device UD-LT1 and I-O Data Device UD-LT1/EX are both products of I-O Data Device Japan.I-O Data Device UD-LT1 is a hybrid LTE router.I-O Data Device UD-LT1/EX is a hybrid LTE router and is the successor to the IO DATA UD-LT1 router. A security vulnerability exists in I-O Data Device UD-L...

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from the guestipcheck function in the setDoublePppoeConfig module not properly validating input. No detailed vulnerability details are provided at this ti...

Victure RX1800 WiFi 6 安全漏洞

The Victure RX1800 WiFi 6 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 WiFi 6 that stems from susceptibility to a command injection attack, where an attacker can send a crafted payload with parameters designed for the ping utility to execute arbitrary...

D-Link DIR-605L Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from D-Link that supports a variety of network connections and security settings. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates in the file /goform/formResetStatistic parameter curTime, no details of the vulnerability are...

D-Link DI-8400 tgfile_htm Buffer Overflow Vulnerability

The D-Link DI-8400 is a wireless router from China-based AUO D-Link. The D-Link DI-8400 tgfilehtm suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the service program or execute arbitrary code in the application...

TOTOLINK X6000R has an unspecified vulnerability

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R, which stems from a failure to strictly filter the parameters of the UciSet Str function, and can be exploited by an attacker to execute arbitrary commands by...

Tenda AC10 Buffer Overflow Vulnerability (CNVD-2025-11096)

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from a buffer overflow in the parameter rebootTime. An attacker can exploit this vulnerability to execute arbitrary code...

D-Link DWR-2000M Cross-Site Scripting Vulnerability

The D-Link DWR-2000M is a wireless router from China's AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DWR-2000M. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to obtain...

TRENDnet TEW-651BR 安全漏洞

The TRENDnet TEW-651BR is a wireless router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-651BR version 2.04B1, TEW-652BRP version 3.04b01, and TEW-652BRU version 1.00b12, which originates in the /virtualserver.htm page's vsRuleVirtualServerName1.1. 10.0.0 parameter...