CVE-2025-8907 H3C M2 NAS Webserver Configuration unnecessary privileges

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather hig...

The vulnerability in the built-in web server boa (/server/boa.conf) of the TRENDnet TV-IP110WN IP camera software allows a intruder to escalate their privileges and gain full control over the device.

The vulnerability of the built-in web server boa /server/boa.conf of the TRENDnet TV-IP110WN IP camera software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain full control over the device...

CVE-2025-8757

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approa...

CVE-2025-8757

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approa...

CVE-2025-8757 TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approa...

CVE-2025-8757

The CVE-2025-8757 entry concerns TRENDnet TV-IP110WN (firmware 1.2.2). Affected component: Embedded Boa Web Server, specifically the /server/boa.conf file. Root cause is described as a least-privilege violation in the manipulated configuration, allowing local attackers to exploit the issue. Explo...

CVE-2025-8757 TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approa...

TRENDnet TV-IP110WN 安全漏洞

The TRENDnet TV-IP110WN is a wireless webcam from Trendnet, Inc. A security vulnerability exists in TRENDnet TV-IP110WN version 1.2.2, which stems from a least privilege violation in the file /server/boa.conf...

The vulnerability in the built-in web server boa (/boafrm/formIPv6Addr) of TOTOLINK X15 router software allows a hacker to induce a service failure.

The vulnerability of the built-in web server boa /boafrm/formIPv6Addr of TOTOLINK X15 router software relates to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to cause service interruption...

The vulnerability of the built-in boa server (/boafrm/formMapDelDevice) of the TOTOLINK X15 router’s microprogramming software allows a hacker to cause a service failure or execute arbitrary commands.

The vulnerability of the built-in server boa /boafrm/formMapDelDevice of the TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the macstr parameter. Exploiting this vulnerability allows a remote attacker to cause...

The vulnerability of the built-in web server boa (/boafrm/formPortFw) of TOTOLINK A702R router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the built-in web server boa /boafrm/formPortFw of TOTOLINK A702R router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the parameter servicetyp. Exploiting this vulnerability allows a malicious actor to caus...

PT-2025-32444 · Trendnet +1 · Trendnet Tv-Ip110Wn +1

Name of the Vulnerable Software and Affected Versions: TRENDnet TV-IP110WN version 1.2.2 Description: A vulnerability exists in TRENDnet TV-IP110WN version 1.2.2 related to an unknown functionality of the file /server/boa.conf within the Embedded Boa Web Server component. This issue results in a...

The vulnerability of the built-in boa server (/boafrm/formRoute) of the TOTOLINK X15 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formRoute of the TOTOLINK X15 router software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the built-in BOA server (/boafrm/formMultiAPVLAN) of the TOTOLINK X15 router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in server boa /boafrm/formMultiAPVLAN of the TOTOLINK X15 microprogrammed router software is related to the issue where the operation’s output goes beyond the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the built-in web server boa (/boafrm/formWlanMultipleAP) of TOTOLINK A702R router software allows a intruder to cause a service failure.

The vulnerability of the built-in web server boa /boafrm/formWlanMultipleAP of TOTOLINK A702R router software is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability of the built-in boa server (/boafrm/formFilter) of the TOTOLINK X15 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the built-in server boa /boafrm/formFilter of the TOTOLINK X15 router microprogramming system is related to the issue where an operation is executed outside the buffer in memory when processing the ip6addr parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the built-in boa server (/boafrm/formMapDel) of the TOTOLINK X15 router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in server boa /boafrm/formMapDel of the TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter devicemac1. Exploiting this vulnerability allows a remote attacker ...

D-Link DIR-513 Buffer Overflow Vulnerability

The D-Link DIR-513 is a wireless router device manufactured by D-Link. The D-Link DIR-513 version 1.10 suffers from a buffer overflow vulnerability that originates from improper handling of the curTime parameter in the sprintf function in the Boa Webserver component/goform/formSetWanNonLogin file...

D-Link DIR-513 Buffer Overflow Vulnerability (CNVD-2025-16670)

The D-Link DIR-513 is a wireless router device manufactured by D-Link. A buffer overflow vulnerability exists in the D-Link DIR-513 version 1.0, which originates from improper handling of the curTime parameter in the sprintf function of the /goform/formLanSetupRouterSettings file in the Boa...

CVE-2025-7910

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function sprintf of the file /goform/formSetWanNonLogin of the component Boa Webserver. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the atta...