NETIS SYSTEMS WF2409E Command Injection Vulnerability

NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409E version v.3.6.42541 that originates from a vulnerability that allows an attacker to execute arbitrary code via the ping and traceroute functions in the management interface...

Tenda AC6 Denial of Service Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A denial of service vulnerability exists in the Tenda AC6. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited to cause a denial of service device crash via a long string in the...

CVE-2023-4498 Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router

Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...

TP-LINK Archer C2 Authorization Issues Vulnerability

The TP-LINK Archer C2 is a wireless router from China P&L TP-LINK. A security vulnerability exists in versions prior to Archer C20 V1230616, which stems from the presence of an incorrect authentication vulnerability that allows network-adjacent, unauthenticated attackers to execute arbitrary...

PT-2023-27972 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version V15.03.06.42 multi Description: A stack overflow issue was discovered, which occurs via the wpapsk crypto parameter at the "/goform/WifiExtraSet" API endpoint. Recommendations: For Tenda AC9 version V15.03.06.42 multi,...

Tenda AC23 sub_451784 function stack overflow vulnerability

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23 sub451784 function. The vulnerability stems from the sub451784 function failing to properly validate the length of the input data, which can be exploited by an attacker to...

TechView LA-5570 安全漏洞

The TechView LA-5570 is a wireless router. A security vulnerability exists in the TechView LA-5570 version 1.0.19T53,which originates from a vulnerability that allows an attacker to gain escalated privileges via a telnet connection...

TP-LINK TL-WR941ND 安全漏洞

The TP-LINK TL-WR941ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Routers, which stems from a buffer overflow vulnerability in the radiusSecret parameter. Affected products and versions: TP-Link WR841N V8 version, TL-WR940N V2 version, TL-WR941ND V5...

Zyxel NBG6604 Command Injection Vulnerability (CNVD-2023-64085)

The Zyxel NBG6604 is a dual-band wireless router from China's Hopkins Zyxel. The Zyxel NBG6604 V1.01ABIR.1C0 suffers from a command injection vulnerability that stems from a failure to properly filter constructed command special characters, commands, etc. in the NTP function. An attacker can...

ASUS RT-AC66U Information Disclosure Vulnerability

The ASUS RT-AC66U is a wireless router from the Chinese company ASUS. An information disclosure vulnerability exists in ASUS RT-AC66U B1 version 3.0.0.4.28651665, which originates from transmitting sensitive information in clear text. An attacker can exploit the vulnerability to obtain sensitive...

NETGEAR XR300 Buffer Overflow Vulnerability

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from a failure to properly validate the length of the input data via the wlassid and wlgssid parameters of genieapwifichange.cgi, which can be exploited by a...

TOTOLINK T10 pin parameter buffer overflow vulnerability

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10v2 version 5.9c.5061B20200511, which stems from the pin parameter in setWiFiWpsConfig failing to correctly validate the length size of the input data, and...

Tenda 4G300 Buffer Overflow Vulnerability

Tenda 4G300 is a wireless router from Tenda China. The Tenda 4G300 suffers from a buffer overflow vulnerability that can be exploited by an attacker to launch a denial of service attack or remote code execution attack by setting a page field in a request...

TOTOLINK T10 缓冲区错误漏洞

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10v2 version 5.9c.5061B20200511, which stems from the pin parameter in setWiFiWpsConfig failing to correctly validate the length size of the input data, and...

D-Link DIR-895 Authentication Bypass Vulnerability

The D-Link DIR-895 is a wireless router from China's AUO D-Link. The D-Link DIR-895 suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in the phpcgimain function in cgibin, which can be exploited by an attacker to bypass authentication...

D-Link DIR-885L Authentication Bypass Vulnerability

The D-Link DIR-885L is a wireless router from China-based AUO D-Link. The D-Link DIR-885L suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in phpcgi, which can be exploited by an attacker to bypass authentication...

Furukawa Electric 423-41W/AC 跨站脚本漏洞

The Furukawa Electric 423-41W/AC is a wireless router from Furukawa Electric Japan. A cross-site scripting vulnerability exists in the Furukawa Electric 423-41W/AC v1.1.4 prior and LD421-21W v1.3.3 prior, which stems from an HTML injection vulnerability via the serial number update feature...

CVE-2023-37565

Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier,...

Tenda AC10 Command Execution Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC10 version v15.03.06.26. The vulnerability stems from the application failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

Milesight UR32L ys_thirdparty check_system_user function command injection vulnerability

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L ysthirdparty checksystemuser function, which can be exploited by an attacker to execute arbitrary commands on the system...