D-Link DSL-6850U Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in D-Link DSL-6850U versions BZ1.00.01 – BZ1.00.09. D-Link DSL-6850U is a router “manufactured by D-Link for Bezeq in Israel” The vulnerabilities found are: Default Credentials Remote Command Execution Credit An...

MitraStar GPT-2541GNAC (HGU) and DSL-100HN-T1 Elevation of Privilege Vulnerability (CNVD-2017-33285)

The MitraStar GPT-2541GNAC HGU and DSL-100HN-T1 are both MitraStar router products. An elevation of privilege vulnerability exists in the MitraStar GPT-2541GNAC HGU version 1.00VNJ0b1 and the DSL-100HN-T1 ES113WJY0b16, which originates from the account zyad1234 with the password zyad1234. An...

MitraStar GPT-2541GNAC (HGU) and DSL-100HN-T1 Elevation of Privilege Vulnerability

The MitraStar GPT-2541GNAC HGU and DSL-100HN-T1 are both MitraStar router products. An elevation of privilege vulnerability exists in the MitraStar GPT-2541GNAC HGU version 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16. An attacker can exploit this vulnerability to gain root access by specifying /bin/...

D-Link DSL-2740E HTML Injection Vulnerability

The D-Link DSL-2740E is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DSL-2740E version 1.00BG20150720, which originates from the program failing to properly filter user-submitted input. A remote attacker can exploit the vulnerability to execute arbitrar...

CVE-2017-16522

MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute...

Design/Logic Flaw

MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...

Design/Logic Flaw

MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute...

CVE-2017-16523

MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...

CVE-2017-16523

The CVE-2017-16523 entry describes an elevation-of-privilege issue in MitraStar router models MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16. A Zyad1234 account password zyad1234 is undocumented and effectively grants root-level access. This vulnerability originates from...

CVE-2017-16523

MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...

Cross site scripting

D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...

CVE-2016-10699

D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...

CVE-2016-10699

CVE-2016-10699 affects D-Link DSL-2740E, version 1.00_BG_20150720. The vulnerability is a persistent cross-site scripting (XSS) flaw in the username and password input fields due to lack of input sanitization. A remote unauthenticated user can craft logins and passwords containing script tags, po...

CVE-2016-10699

D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...

PT-2017-7914 · D Link · D-Link Dsl-2740E

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2740E version 1.00 BG 20150720 Description: The issue allows for persistent XSS attacks through the username and password fields. A remote unauthenticated user can craft logins and passwords with script tags, which can affect an...

Zyxel P-2812HNU-F1 DSL Router Command Injection Vulnerability

The Zyxel P-2812HNU-F1 DSL router suffers from a remote command injection vulnerability. Firmware versions V3.11TUE3 KPN and V3.11TUE8 KPN are affected. Zyxel P-2812HNU-F1 DSL router - command injection ================================================= The Zyxel P-2812 is common in the Netherland...

Zyxel P-2812HNU-F1 DSL Router Command Injection

Zyxel P-2812HNU-F1 DSL router - command injection ================================================= The Zyxel P-2812 is common in the Netherlands KPN/Telfort and Norway Telenor. The Dutch firmware is susceptible to authenticated command injection through qosqueueadd.cgi and the WebQueueInterface...

CVE-2015-7256

CVE-2015-7256 affects multiple ZyXEL devices (NWA1100-N/NH/NWA1121-NI/NWA1123-AC/NWA1123-NI, DSL CPEs, small business gateways, switches, etc.) where non-unique X.509 certificates and SSH host keys are used across devices. Root cause: embedded devices reuse certificates/keys, enabling impersonati...

ASUS DSL-N10S Cross-Site Request Forgery Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site request forgery vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to perform unauthorized operations...

ASUS DSL-N10S Cross-Site Scripting Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...