Tenda AC8 Buffer Overflow Vulnerability

Tenda AC8 is a wireless router from Tenda, a Chinese company. The Tenda AC8 suffers from a buffer overflow vulnerability that originates from a boundary error in the parameter firewallEn when handling untrusted input, which can be exploited by an attacker to execute arbitrary code on the target...

Tenda AC8 timeZone Parameter Stack Overflow Vulnerability

Tenda AC8 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC8 timeZone parameter, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause a denial of service...

Tenda AC8 shareSpeed Parameter Stack Overflow Vulnerability

Tenda AC8 is a wireless router from Tenda, a Chinese company. A stack overflow exists in the Tenda AC8 shareSpeed parameter, which can be exploited by an attacker to cause a denial of service...

H3C Magic R300 Stack Overflow Vulnerability (CNVD-2023-52052)

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability, which is caused by incorrect boundary checking of the AddWlanMacList interface on /goform/aspForm. An attacker could exploit this vulnerability to cause a buffer...

H3C Magic R300 Stack Overflow Vulnerability (CNVD-2023-52053)

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the EditvsList interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overflow a...

H3C Magic R300 Stack Overflow Vulnerability (CNVD-2023-57675)

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability caused by a failure to properly bounds check the SetAPWifiorLedInfoById interface on /goform/aspForm. An authenticated, remote attacker could exploit this...

H3C Magic R300 Stack Overflow Vulnerability

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the DelSTList interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overflow an...

The vulnerability of the microprogrammed software of the wireless VoIP router ICOM SR-7100VN, related to improper privilege assignment, allows a hacker to elevate their privileges.

The vulnerability of the microprogrammed software of the wireless VoIP router ICOM SR-7100VN is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

SAP Business Planning and Consolidation Cross-Site Scripting Vulnerability (CNVD-2023-40159)

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A buffer overflow vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version, which stems from the discovery of a contained stack overflow vulnerability via the function settftpupgrad. A remote attacker...

D-Link DIR-605L Stack Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...

Tenda AC5 Code Execution Vulnerability

Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this...

PT-2023-23557 · Edimax · Edimax Wireless Router N300

Name of the Vulnerable Software and Affected Versions: Edimax Wireless Router N300 Firmware BR-6428NS v4 Description: A Command Injection issue allows an attacker to execute arbitrary code via the setWAN function in /bin/webs without limitations. Recommendations: For Edimax Wireless Router N300...

CVE-2023-31986

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations...

CVE-2023-31986

CVE-2023-31986 affects Edimax Wireless Router N300, BR-6428NS_v4. The vulnerability is a command injection in the /bin/webs setWAN function that allows an attacker to execute arbitrary code with network access and no privileges, as stated in multiple sources. Affected component: setWAN in /bin/we...

Tenda AC23 Command Injection Vulnerability

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a command injection vulnerability, which stems from the parameter v2 of the file /bin/ate failing to correctly filter construct command special characters, commands, etc. An attacker can exploit this...

CVE-2023-31983

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations...

Command injection

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations...

CVE-2023-31985

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations...

Command injection

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations...

PT-2023-23556 · Edimax · Edimax Wireless Router N300

Name of the Vulnerable Software and Affected Versions: Edimax Wireless Router N300 Firmware BR-6428NS v4 Description: A Command Injection issue allows an attacker to execute arbitrary code via the formAccept function in "/bin/webs" without any limitations. Recommendations: For Edimax Wireless...