PT-2016-6165 · Corega · Corega Cg-Wlbargl

Name of the Vulnerable Software and Affected Versions: Corega CG-WLBARGL devices affected versions not specified Description: The issue allows remote authenticated users to execute arbitrary commands via unspecified vectors. Recommendations: At the moment, there is no information about a newer...

Corega CG-WLBARAGM Denial of Service Vulnerability

The Corega CG-WLBARGL is a wireless LAN router from Corega Japan. A denial of service vulnerability exists in Corega CG-WLBARAGM. A remote attacker can exploit this vulnerability to cause a denial of service reboot...

CG-WLR300GNV Series does not limit authentication attempts

Overview CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Takeshi Okamoto of Kanagawa Institute of Technology and Takaaki Minegish...

JVN#76653039: CG-WLBARGL vulnerable to command injection

CG-WLBARGL provided by Corega Inc is a wireless LAN router. CG-WLBARGL contains a command injection vulnerability. Impact An arbitrary command may be executed by an authenticated attacker. Solution Do not use CG-WLBARGL As of Jun 22nd, 2016, there are no practical solutions to this issue. It is...

JVN#24409899: CG-WLBARAGM vulnerable to denial-of-service (DoS)

CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains a denial-of-service DoS vulnerability. Impact An unauthenticated remote attacker may cause the product to reboot. Solution Apply a Workaround The following workarounds may mitigate the affects of this vulnerability...

JVN#75028871: CG-WLR300GNV Series does not limit authentication attempts

CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Impact An unauthenticated attacker within wireless range of the device may perfor...

DEBIAN-CVE-2015-8604

SQL injection vulnerability in the hostnewgraphs function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cgg parameter in a save action...

CVE-2016-1158

CVE-2016-1158 affects Corega CG-WLBARGMH and CG-WLBARGNL wireless routers. The described issue is a Cross-Site Request Forgery (CSRF) that lets an attacker hijack administrator sessions to perform administrative actions when a logged-in user visits a malicious page. Connected sources (JVN/JVNDB, ...

JVN#59349382: Multiple Corega wireless LAN routers vulnerable to cross-site request forgery

Multiple wireless LAN routers provided by Corega Inc contain a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged into the management screen, various administrative functions may be performed. Solution Apply a workaround The following workaround...

CVE-2015-7794

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...

CVE-2015-7793

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...

Design/Logic Flaw

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...

Code injection

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...

Design/Logic Flaw

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...

CVE-2015-7794

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service traffic amplification via crafted queries...

CVE-2015-7793

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors...

CVE-2015-7792

CVE-2015-7792 affects Corega CG-WLBARGS wireless LAN routers. The vulnerability arises from CG-WLBARGS not properly performing authentication, enabling an attacker who can access the device to log in with administrative privileges and perform arbitrary administrative operations. The issue is mapp...

CVE-2015-7792

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...

CVE-2015-7794

CVE-2015-7794 affects Corega CG-WLNCM4G devices that may act as an open DNS resolver. This condition enables an unauthenticated remote attacker to weaponize the device for a DNS amplification attack, contributing to a DDoS scenario. Documented impact describes a denial of service via crafted quer...

CVE-2015-7793

CVE-2015-7793 affects Corega CG-WLBARAGM wireless routers. The issue is that the device may behave as an open proxy, enabling remote attackers to trigger outbound network traffic via unspecified vectors. Documents from JVN/NVD/NVD-linked records confirm the affected product and open-proxy behavio...