D-Link DSL-G624T - Information Disclosure

source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially...

D-Link DSL-G624T - Information Disclosure

D-Link DSL-G624T - Information Disclosure source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticate...

CVE-2006-2337

Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter...

CVE-2006-2337

CVE-2006-2337 describes a directory traversal vulnerability in the webcm component of the D-Link DSL-G604T Wireless ADSL Router Modem. The flaw allows an attacker to read arbitrary files by supplying an absolute path in the getpage parameter. The vulnerability affects the router’s web interface a...

Default credentials

NETGEAR WGT624 Wireless DSL router has a default account of superusername "Gearguy" and superpasswd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers...

CVE-2002-2159

The CVE affects Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with firmware 1.42.7, where installing this upgrade opens TCP port 5678 for remote administration even when Block WAN and Remote Admin are disabled. This creates a potential for remote access by attackers. Publicly availabl...

CVE-2003-1250

Affected product: Efficient Networks 5861 DSL router. Vulnerability: When running firmware 5.3.80 and configured to block incoming TCP SYN, the device can be remotely crashed by a flood of TCP SYN packets to the WAN interface (e.g., via a port scanner). Impact: Denial of service (device crash). E...

CVE-2003-1250

Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service crash via a flood of TCP SYN packets to the WAN interface using a port scanner such as nmap...

Linksys Gozila CGI DoS Vulnerability

The Linksys BEFSR41 EtherFast Cable/DSL Router crashes if somebody accesses the Gozila CGI without argument on the web administration interface. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Linksys Gozila CGI denial of service

The Linksys BEFSR41 EtherFast Cable/DSL Router crashes if somebody accesses the Gozila CGI without argument on the web administration interface. OpenVAS Vulnerability Test $Id: linksysgozilacgiDoS.nasl 6702 2017-07-12 13:49:41Z cfischer $ Description: Linksys Gozila CGI denial of service Authors:...

DSL-504T.txt

Device: CUSTOMER=DLinkEU MODEL=DSL-504T Version: only tested with VERSION=V1.00B01T16.EU.20040217 Bugs: i remote firmware upgrade without password ii config retrieval without password Exploitation: remote Date: 26/05/2005 Status: vendor not contacted Workaround: disable remote web management...

CVE-2001-1538

SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access...

CVE-2001-1538

CVE-2001-1538 affects the SpeedXess HA-120 DSL router. The vulnerability arises from a default administrative password of "speedxess" that allows remote access. The connected sources confirm the issue and its basic impact (unauthorized access to admin functions) but do not provide any remediation...

CVE-2002-2020

The CVE-2002-2020 entry concerns Netgear RP114 Cable/DSL Web Safe Router with Firmware 3.26. According to the provided documents, the vulnerability arises from a default administrator password and the acceptance of admin logins on the external interface, enabling remote attackers to gain privileg...

CVE-2005-1827

The CVE-2005-1827 issue affects the D-Link DSL-504T, where an unauthenticated remote attacker can bypass authentication by sending a direct request to the firmwarecfg endpoint. This allows privilege escalation to perform actions such as upgrading firmware, restarting the router, or restoring a sa...

CVE-2005-1828

CVE-2005-1828 affects D-Link DSL-504T. The root cause is that usernames and passwords are stored in cleartext in the router configuration file, enabling remote retrieval of sensitive data without authentication. Public documents confirm the affected device and exposure, but do not provide an offi...

CVE-2005-1828

D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information...

CVE-2005-1827

D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecfg...

PT-2005-2795 · D Link · D-Link Dsl-504T

Name of the Vulnerable Software and Affected Versions: D-Link DSL-504T affected versions not specified Description: The issue allows remote attackers to obtain sensitive information because usernames and passwords are stored in cleartext in the router configuration file. Recommendations: At the...

CVE-2005-1680

CVE-2005-1680 affects D-Link DSL-502T/504T/562T/DSL-G604T. Exploitation of /cgi-bin/firmwarecfg allows remote attackers to bypass authentication either if the attacker’s IP already exists in /var/tmp/fw_ip or if the request is the first, which causes /var/tmp/fw_ip to be created and store the att...