D-Link DIR-816 Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the mirrored version of the D-link DIR-816 firmware A2v1.10CNB04.img. The vulnerability stems from the fact that when the wantype of its /goform/form2Wan.cgi component is 3, the...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-75822)

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.13 is vulnerable to a buffer overflow vulnerability caused by a stack buffer overflow in formfastsettingwifiset in the httpd server. An authenticated local attacker can exploit this vulnerability to cause a denial of service...

CVE-2022-35191

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via a crafted HTTP connection request...

Tenda AC9 Command Injection Vulnerability (CNVD-2022-75820)

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

PT-2022-22900 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A command injection issue exists in the "/goform/exeCommand" API endpoint, allowing attackers to construct cmdinput parameters for arbitrary command execution. Recommendations: For Tenda W6 version...

WAVLINK WL-WN531P3和WAVLINK WN533A8 安全漏洞

WAVLINK WL-WN531P3 and WAVLINK WN533A8 are both products of China RuiYin Technology WAVLINK.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router. A security vulnerability exists in WAVLINK that stems from its wireless.cgi component not filtering the parameters deletelist,...

CVE-2022-35534

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifimultissid.shtml...

TOTOLINK A3600R has unspecified vulnerabilities

TOTOLINK A3600R is a 6 antenna 1200M wireless router from TOTOLINK China.A security vulnerability exists in TOTOLINK A3600R Firmware V4.1.2cu.5182B20201102 version, which originates from the inclusion of the root password in /etc/shadow.sample. contains the root password. An attacker could exploi...

The vulnerability in the web interface for managing microprogrammed wireless router software from Cisco’s Small Business series—RV110W, RV130, RV130W, and RV215W—allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV110W, RV130, RV130W, and RV215W routers stems from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

D-Link DSL-3782 Command Injection Vulnerability

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DSL-3782 suffers from a command injection vulnerability that stems from the presence of a command injection point on the administration page. No detailed vulnerability details are provided at this time...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2022-56666)

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that stems from a stack-based buffer overflow in the getAttrValue method. No detailed vulnerability details are provided at this time...

TCL LinkHub Mesh Wi-Fi 信息泄露漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. TCL LinkHub Mesh Wi-Fi is vulnerable to an information disclosure vulnerability that originates in the confctlgetguestwlan function and can be exploited by attackers to cause information disclosure...

TCL LinkHub Mesh Wi-Fi 信任管理问题漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. The TCL LinkHub Mesh Wi-Fi prodchangerootpasswd feature is hard-coded vulnerable. An attacker can exploit this vulnerability to obtain the root password...

Unauthorized Connection to Telnet Service Vulnerability in TOTOLINK T8

TOTOLINK T8 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK T8 suffers from an unauthorized connection to Telnet service vulnerability, which can be exploited by an attacker to initiate unauthorized telnet and gain control of the server...

Vulnerability Spotlight: How a code re-use issue led to vulnerabilities across multiple products

By Francesco Benvenuto. Recently, I was performing some research on a wireless router and noticed the following piece of code:...

WAVLINK WN579 X3 messages.txt Access Control Error Vulnerability

WAVLINK WN579 X3, a wireless router from WAVLINK China, is vulnerable to an access control error in WAVLINK WN579 X3 M79X3.V5030.191012. The vulnerability is caused by the failure to set reasonable access rights to the messages.txt file, which can be exploited to obtain critical information by...

H3C Magic R200 Buffer Overflow Vulnerability (CNVD-2022-54323)

H3C Magic R200 is a wireless router device. H3C Magic R200 doping.asp has a buffer overflow vulnerability in the handling of INTF parameters, which can be exploited by remote attackers to submit special requests that can crash the service program or execute arbitrary code in the application conte...

H3C Magic R200 Buffer Overflow Vulnerability (CNVD-2022-54322)

H3C Magic R200 is a wireless router device. H3C Magic R200 AJAX/ajaxget processing ajaxmsg parameter has a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash the service or execute arbitrary code in application context...

WAVLINK WN579 X3 安全漏洞

WAVLINK WN579 X3, a wireless router from WAVLINK China, is vulnerable to an access control error in WAVLINK WN579 X3 M79X3.V5030.191012. The vulnerability is caused by the failure to set reasonable access rights to the messages.txt file, which can be exploited to obtain critical information by...

WAVLINK WN530HG4 信任管理问题漏洞

The WAVLINK WN530HG4 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WN530HG4 M30HG4.V5030.191116 version, which originates from a hard-coded encryption/decryption key contained in the configuration file of xportAllSettings.sh. No details of the...