TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17121)

TOTOLINK A720R is a wireless router.TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the flag parameter...

TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17123)

TOTOLINK A720R is a wireless router. TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via host parameters...

TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17117)

TOTOLink T6 is a wireless dual-band router from TotoLink, China. recvmeshinfosync function of TOTOLink T6 is vulnerable to command injection. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...

D-Link DIR-846 Command Execution Vulnerability (CNVD-2022-38534)

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15176)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15177)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 contains a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the stationaccessenable parameter...

D-Link DIR-878 Operating System Command Injection Vulnerability

D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company in China. The D-Link DIR-878 is vulnerable to an operating system command injection vulnerability, which stems from the inclusion of a command injection vulnerability in a system function. An attacker could exploit the...

Stack overflow vulnerability in multiple TOTOLink products

TOTOLink A3100R is a wireless router. TOTOLink A830R is a wireless dual-band router.TOTOLink A720R is a wireless router. A stack overflow vulnerability exists in several TOTOLink products, which can be exploited by attackers to cause a denial of service via the IpTo parameter...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13941)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the firewallEn parameter...

TOTOLINK Technology Routers Command Injection Vulnerability (CNVD-2022-17113)

TOTOLink T6 is a wireless dual-band router from TotoLink, China.TOTOLink T10 is a wireless network system router from TotoLink, China.The recvSlaveUpgstatus function of TOTOLINK Technology Routers T6 and T10 is vulnerable to command injection. vulnerability. An attacker can exploit this...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15175)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

D-Link Dir-823-Pro Command Injection Vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro 1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

D-Link DIR-878 OS Command Injection Vulnerability (CNVD-2022-14785)

D-Link DIR-878 is a wireless router from D-Link Taiwan, China. The D-Link DIR-878 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

D-Link DIR-882 Operating System Command Injection Vulnerability

D-Link DIR-882 is a wireless router from D-Link Taiwan, China. The D-Link DIR-882 suffers from an operating system command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17118)

TOTOLink T6 is a wireless dual-band router from TotoLink, China.A command injection vulnerability exists in the meshSlaveDlfw function of TOTOLink T6. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...

D-Link DIR-846 Command Execution Vulnerability

A command execution vulnerability exists in the D-Link DIR-846, a wireless router from D-Link in Taiwan, China, which originates in the product HNAP1/control/SetNetworkTomographySettings.php file. The vulnerability is caused by the fact that the HNAP1/control/SetNetworkTomographySettings.php file...

CVE-2021-45401

CVE-2021-45401 describes a command-injection vulnerability in the Tenda AC10U AC1200 router (AC10U V1.0 firmware V15.03.06.49_multi) exploited via the setUsbUnload path. The client-supplied deviceName is passed directly to the doSystemCmd function, enabling arbitrary command execution. Documents ...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2022-12736)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the devName parameter...

SUSE SLES12 Security Update : kernel (SUSE-SU-2022:0477-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0477-1 advisory. - The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instruction...

Tp-link TL-WA850RE licensing issue vulnerability

The Tp-link TL-WA850RE is a 300Mbps wireless LAN repeater from Tp-link, China. It enhances WiFi signals to reach locations that routers cannot reach, while reducing interference.A security vulnerability exists in versions prior to TP-Link TL-WA850RE v6 200923, which stems from the fact that Wi-Fi...