EUVD-2016-8659

Malware in sbrugna...

CVE-2016-7811

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

CVE-2016-7810

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...

CVE-2016-7811

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

CVE-2016-7810

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7811

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

CVE-2016-7809

The CVE-2016-7809 entry concerns a CSRF vulnerability in Corega CG-WLR300NX firmware versions 1.20 and earlier. Affected product: CG-WLR300NX (wireless router). Vulnerable component: the firmware’s authentication handling allows an attacker to hijack a logged-in user’s session to perform unintend...

CVE-2016-7810

CVE-2016-7810 affects Corega CG-WLR300NX firmware up to v1.20. It is a Cross-site Scripting (CWE-79) vulnerability that allows an attacker with administrator rights to inject arbitrary web script/HTML via unspecified vectors, potentially causing script execution in the user’s browser. Affected pr...

CVE-2016-7811

The CVE-2016-7811 entry concerns Corega CG-WLR300NX firmware (version 1.20 and earlier). The vulnerability allows an attacker on the same network segment to bypass access restrictions and perform arbitrary operations via unspecified vectors. Public sources (NVD/NVD mirrors, JVN/JVNDB) consistentl...

PT-2017-9361

Name of the Vulnerable Software and Affected Versions Corega CG-WLR300NX firmware versions 1.20 and earlier Description A cross-site scripting issue allows an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Corega CG-WLR300NX...

CVE-2016-7809: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...

PT-2017-9362

Name of the Vulnerable Software and Affected Versions Corega CG-WLR300NX firmware version 1.20 and earlier Description The issue allows an attacker on the same network segment to bypass access restrictions and perform arbitrary operations. Recommendations For Corega CG-WLR300NX firmware version...

PT-2017-9360

Name of the Vulnerable Software and Affected Versions Corega CG-WLR300NX firmware versions 1.20 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of logged-in users, enabling them to conduct unintended operations. The exact vectors use...

CVE-2016-7810: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7811: Improper Access Control

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

CG-WLR300NX fails to restrict access permissions

Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX fails to restrict access permissions. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

CG-WLR300NX vulnerable to cross-site request forgery

Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...