Compal CH7465LG-LC Modem / Router Session Management / Command Injection

Compal CH7465LG-LC modem/router multiple vulnerabilities -------------------------------------------------------- The following vulnerabilities are the result of a quick check 3 hours of the Mercury modem. We performed a systematic and deeper evaluation of this device also, which result will be...

Compal ConnectBox Wireless Filter Bypass

Document Title: =============== Compal ConnectBox Wireless - Passphrase Settings Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID:...

Compal ConnectBox - Wireless Passphrase Filter Bypass

Document Title: =============== Compal ConnectBox - Wireless Passphrase Filter Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 1705...

Compal ConnectBox - Wireless Passphrase Filter Bypass

Document Title: =============== Compal ConnectBox - Wireless Passphrase Filter Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 1705...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...

Compal Broadband Networks Router Information Disclosure

Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CBN CH6640E/CG6640E Wireless Gateway Series Multiple Vulnerabilities

No description provided by source. CBN CH6640E/CG6640E Wireless Gateway Series Multiple Vulnerabilities Vendor: Compal Broadband Networks CBN, Inc. Product web page: http://www.icbn.com.tw Affected version: Model: CH6640 and CH6640E Hardware version: 1.0 Firmware version: CH6640-3.5.11.7-NOSH Boo...

CVE-2014-8655

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an a admin or a b root value in the userData cookie in a request to 1 CmgwWirelessSecurity.xml, 2...

CVE-2014-8657

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a denial of service disconnect all wifi clients via a request to wirelessChannelStatus.html...

CVE-2014-8653

Cross-site scripting XSS vulnerability in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie...

CVE-2014-8654

Multiple cross-site request forgery CSRF vulnerabilities in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway hardware 1.0 with firmware CH6640-3.5.11.7-NOSH allow remote attackers to hijack the authentication of administrators for requests that 1 have unspecified impact on DDNS...

CVE-2014-8656

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of 1 admin for the admin account and 2 compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information...

Cross site scripting

Cross-site scripting XSS vulnerability in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie...

Default credentials

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of 1 admin for the admin account and 2 compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information...

Authentication flaw

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an a admin or a b root value in the userData cookie in a request to 1 CmgwWirelessSecurity.xml, 2...

Cross site request forgery (csrf)

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a denial of service disconnect all wifi clients via a request to wirelessChannelStatus.html...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway hardware 1.0 with firmware CH6640-3.5.11.7-NOSH allow remote attackers to hijack the authentication of administrators for requests that 1 have unspecified impact on DDNS...

CVE-2014-8655

The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an a admin or a b root value in the userData cookie in a request to 1 CmgwWirelessSecurity.xml, 2...

CVE-2014-8654

Multiple cross-site request forgery CSRF vulnerabilities in Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway hardware 1.0 with firmware CH6640-3.5.11.7-NOSH allow remote attackers to hijack the authentication of administrators for requests that 1 have unspecified impact on DDNS...