TOTOLINK T6 FUN_00418540 Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the url parameter in the FUN00418540 function not checking its length for input data. A remote attacker can exploit...

TOTOLINK T6 FUN_0041880c Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN0041880c function not checking its length for input data. A remote attacker can exploi...

TOTOLINK T6 FUN_0041621c Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015, which stems from the cloneMac parameter in the FUN0041621c function that does not check its length for input data. A remote attacker can...

Huawei WS7200-10 Access Control Error Vulnerability

The Huawei ws7200-10 is a wireless router from the Chinese company Huawei HUAWEI. Huawei WS7200-10 11.0.2.13 suffers from an access control error vulnerability, which stems from a problem with user password authentication, and can be exploited by an attacker on a local area network LAN to obtain ...

WAVLINK WN579 X3 Information Disclosure Vulnerability (CNVD-2022-61036)

The WAVLINK WN579 X3 is a wireless router from the Chinese company WAVLINK. An information disclosure vulnerability exists in WAVLINK WN579 X3 M79X3.V5030.180719 version, which originates from improper authorization management in /cgi-bin/ExportAllSettings.sh. An attacker can exploit this...

WAVLINK WN535 G3 Information Disclosure Vulnerability

WAVLINK WN535 G3 is a wireless router from WAVLINK China.WAVLINK WN535 G3 version M35G3R.V5030.180927 is vulnerable to an information disclosure vulnerability that stems from improper authorization management on the livemfg.shtml page, which could be exploited by an attacker to obtain sensitive...

TOTOLINK A7000R has a logic flaw vulnerability

The TOTOLINK A7000R is a wireless router. The TOTOLINK A7000R suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

TOTOLINK A3100R is vulnerable to trust management issues

The TOTOLINK A3100R is a wireless router. The TOTOLINK A3100R suffers from a trust management issue vulnerability that can be exploited by an attacker to obtain the root password...

CVE-2022-30477

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request...

TP-LINK TL-WR840N Access Control Error Vulnerability

The TP-LINK TL-WR840N is a wireless router from China P&L TP-LINK. An Access Control Error vulnerability exists in the TP-Link TL-WR840N EU v6.20, which stems from an insecure UART console, and can be exploited by an attacker to execute commands as the root user without authentication...

Totolink A3600R Buffer Overflow Vulnerability

TotoLink A3600R is a 6-antenna 1200M wireless router from TotoLink, Taiwan, China.A buffer overflow vulnerability exists in version V4.1.2cu.5182B20201102 of the Totolink A3600R, which stems from a vulnerability in the fread function of infostat.cgi that contains stacker overflow, which can be...

Tenda AX12 Buffer Overflow Vulnerability (CNVD-2022-42152)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.The Tenda AX12 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a stack overflow...

Tenda TX9 Pro 安全漏洞

Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China.Tenda TX9 Pro is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a buffer overflow...

TOTOLINK A3100R 信任管理问题漏洞

The TOTOLINK A3100R is a wireless router. The TOTOLINK A3100R suffers from a trust management issue vulnerability that can be exploited by an attacker to obtain the root password...

Tenda AX12 缓冲区错误漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.The Tenda AX12 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a stack overflow...

WAVLINK WN535 G3 Cross-Site Scripting Vulnerability

WAVLINK WN535 G3 is a wireless router from WAVLINK China. WAVLINK WN535 G3 suffers from a cross-site scripting vulnerability, which stems from a lack of filtering and escaping of the hostname parameter in /cgi-bin/login.cgi, and can be exploited by attackers to conduct cross-site scripting attack...

Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Blog by Francesco Benvenuto and Jon Munshaw. Cisco Talos recently discovered several vulnerabilities in InHand Networks’ InRouter302 that could allow an attacker to escalate their privileges on the targeted device from a... This...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50671)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...

D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2022-42153)

The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53550)

TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China.The TOTOLINK N600R V5.3c.7159B20190425 firmware version is vulnerable to command injection, which can be exploited by attackers via the /setting/CloudACMunualUpdate in the filename parameter in /setting/CloudACMunualUpdate to conduc...