106 matches found
CVE-2018-20388
The CVE-2018-20388 entry concerns Comtrend devices: CM-6200un (example version 123.447.007) and CM-6300n (example version 123.553mp1.005). The vulnerability arises from SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0, which can allow remote attacker...
CVE-2018-20388: Insufficiently Protected Credentials
Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...
PT-2018-15342
Name of the Vulnerable Software and Affected Versions Comtrend CM-6200un version 123.447.007 Comtrend CM-6300n version 123.553mp1.005 Description The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and...
COMTREND ADSL Router CT-5367 - Remote Code Execution
Description Any user can edit all users password and execute remote code directly without have access Proof of Concept request this page before login to ADSL panel : 192.168.1.1/password.cgi/password.cgi Username: root support user Old Password: New Password: Confirm Password: !/usr/bin/env pytho...
COMTREND ADSL Router CT-5367 - Remote Code Execution Exploit
Exploit for hardware platform in category remote exploits Exploit Title: Globalnet COMTREND ADSL Router CT-5367 Remote Code Execute Date: 11-12-2017 Exploit Author: TnMch Software Link : null Type : HardWare Risk of use : High Type to use : Remote 1. Description Any user can edit all users passwo...
COMTREND ADSL Router CT-5367 - Remote Code Execution
COMTREND ADSL Router CT-5367 - Remote Code Execution. Remote exploit for Hardware platform Exploit Title: Globalnet COMTREND ADSL Router CT-5367 Remote Code Execute Date: 11-12-2017 Exploit Author: TnMch Software Link : null Type : HardWare Risk of use : High Type to use : Remote 1. Description A...
COMTREND ADSL Router CT-5367 Remote Code Execution
Exploit Title: Globalnet COMTREND ADSL Router CT-5367 Remote Code Execute Date: 11-12-2017 Exploit Author: TnMch Software Link : null Type : HardWare Risk of use : High Type to use : Remote 1. Description Any user can edit all users password and execute remote code directly without have access 2...
COMTREND ADSL Router CT-5367 C01_R12 / CT-5624 C01_R03 - DNS Change
!/bin/bash COMTREND ADSL Router CT-5367 C01R12, CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without...
COMTREND ADSL Router CT-5624 C01_R03 Unauthenticated Remote DNS Changer
!/bin/bash COMTREND ADSL Router CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. On...
COMTREND ADSL Router CT-5367 C01_R12, CT-5624 C01_R03 - Unauthenticated DNS Change
Exploit for cgi platform in category web applications !/bin/bash COMTREND ADSL Router CT-5367 C01R12, CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exis...
Comtrend Router Password Disclosure
Remote password disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
More than 6 0 Non-disclosure vulnerability 2 2 a home router(SOHU router)-vulnerability warning-the black bar safety net
! The affected router list as follows: 1. Observa Telecom AW4062 2. Comtrend WAP-5813n 3. Comtrend CT-5 3 6 5 4. D-Link DSL-2750B 5. Belkin F5D7632-4 6. Sagem LiveBox Pro 2 SP 7. Amper Xavi 7 9 6 8 and 7 9 6 8+ 8. Sagem Fast 1 2 0 1 9. Linksys WRT54GL 1 0. Observa Telecom RTA01N 1 1...
Huawei HG253s V2 Information Disclosure
Huawei HG253s v2 Vodafone-Spain is starting to rent a new Huawei HG253v2 router to the spanish costumers. This new router is coming with a new firmware version. This bug has been found by @VicenDominguez Vulnerability Basically, it is not validating the session cookie in some administration...
Comtrend Cross Site Request Forgery
Hello all, i would like to share with you a security issue that i found with some Comtrend's routers and probably other manufacturer's routers. The method would let us to configure some router models when a user clicks a link created by us. I have not read about this method on the internet, sorry...
60+ Vulnerabilities In 22 SOHO Routers
Dear PacketStorm community, we are a group of security researchers doing our IT Security Master's Thesis at Universidad Europea de Madrid. As a part of the dissertation, we have discovered multiple vulnerability issues on the following SOHO routers: 1. Observa Telecom AW4062 2. Comtrend WAP-5813n...
COMTREND CT-536 and HG-536 Routers Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32975/info COMTREND CT-536 and HG-536 are prone to multiple remote vulnerabilities: - Multiple unauthorized-access vulnerabilities - An information-disclosure vulnerability - Multiple cross-site scripting vulnerabilities ...
Comtrend ADSL Router CT-5367 C01_R12 Remote Root
No description provided by source...
Comtrend CT-507 IT ADSL Router 'scvrtsrv.cmd' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38004/info Comtrend CT-507 IT is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit
No description provided by source...
Sagem 2604 Password Disclosure
+Title: Sagem 2604 Password Discolusre vulnerability +Author: TUNISIAN CYBER +Date: 6/JUN/2014 +Type:WebApp +Risk:High +Affected Version: v2604 Hardware Version: 253251193 Software Version: 3.21a4G +Overview: Sagem modem suffers, from a password discolsure vulnerability. +Proof Of Concept:...