CVE-2017-14244

The CVE-2017-14244 vulnerability affects the iBall ADSL2+ Home Router FW_iB-LR7011A_1.0.2, enabling an authentication bypass by accessing admin pages through CGI extensions (e.g., /info.cgi, /password.cgi). Root cause: CGI-based authentication bypass that exposes admin settings. Impact: attacker ...

CVE-2017-14244

An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FWiB-LR7011A1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi...

iBall Baton 150M Wireless Router Detection

Detection of iBall Baton 150M Wireless Router. The script sends a connection request to the server and attempts to detect the presence of iBall Baton 150M Wireless Router. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Directory traversal

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI...

CVE-2017-11588

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is remote command execution via shell metacharacters in the pingAddr parameter to the waitPingqry.cgi URI. The command...

CVE-2017-11587

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI...

CVE-2017-11589

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd,...

CVE-2017-11587

CVE-2017-11587 affects Cisco DDR2200 ADSL2+ and DDR2201v1 ADSL2+ Residential Gateways. A directory traversal flaw exists in the filename parameter to the /download.conf URI, allowing potential access to arbitrary files on affected devices. Multiple sources (NVD entry and CNVD/CVE records) corrobo...

CVE-2017-11589

CVE-2017-11589 affects Cisco DDR2200/DDR2201v1 ADSL2+ Residential Gateways. The issue is a lack of access control for multiple management pages (e.g., info.html, wancfg.cmd, rtroutecfg.cmd, etc.), allowing potential unauthorized access to sensitive configuration views. Public descriptions in NVD/...

Cisco DDR2200 ADSL2+ Residential Gateway and DDR2201v1 ADSL2+ Residential Gateway Authentication Bypass Vulnerability

The Cisco DDR2200 ADSL2+ Residential Gateway and DDR2201v1 ADSL2+ Residential Gateway are both home wireless gateway devices from Cisco. Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA- An authentication...

CVE-2017-11587

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI...

CVE-2017-11589

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd,...

CVE-2017-11588

Summary: CVE-2017-11588 affects Cisco DDR2200 and DDR2201v1 ADSL2+ Residential Gateways. A remote command execution vulnerability exists due to shell metacharacters in the pingAddr parameter of the waitPingqry.cgi endpoint, with the attacker’s command output retrievable at /PingMsg.cmd. The NVD r...

Tenda ADSL2/2+ Modem D820R Unauthenticated Remote DNS Change

!/bin/bash Tenda ADSL2/2+ Modem D820R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

Tenda ADSL2/2+ Modem D840R DNS Changer

!/bin/bash Tenda ADSL2/2+ Modem D840R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

Tenda ADSL2/2+ Modem D840R - Unauthenticated DNS Change

No description provided by source. !/bin/bash Tenda ADSL2/2+ Modem D840R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible...

Tenda ADSL22+ Modem D840R - DNS Change

Tenda ADSL22+ Modem D840R - DNS Change !/bin/bash Tenda ADSL2/2+ Modem D840R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is...

Linksys WAG120N ADSL2 + Modem Router Download Config File Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Linksys WAG120N ADSL2 + Modem Router Download Config File Vulnerability Vendor Homepage: http://www.linksys.com/in/support-product?pid=01t80000003prsQAAQ Exploit : http://192.168.1.1/Routercfg.cfg Open Routercfg.cfg with Notepad...

Gnet AD1504 Wlan Adsl2+ Router - Denial of Service

Exploit for hardware platform in category dos / poc Exploit Title: Gnet AD1504 Wlan Adsl2+ Router - Denial of Service Date: 2016-12-21 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://youtu.be/6rHJMhyYR9s P...

Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability

Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20372...