Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-21179)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A security vulnerability exists in Tenda Ax3 v16.03.12.10CN, which originates from a stack overflow in the function fromSetSysTime. An attacker can exploit this vulnerability to cause a Denial of Service DoS v...

Tenda-AX3 Buffer Overflow Vulnerability (CNVD-2022-20157)

Tenda-AX3 is a dual-band wireless router from Tenda, China. The Tenda-AX3 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow vulnerability in the formSetPPTPServer function of the Tenda-AX3 Router V16.03.12.10CN. No detailed vulnerability details are provide...

Command Execution Vulnerability in TOTOLINK A850R

The A850R is a Gigabit dual band wireless router. A command execution vulnerability exists in the TOTOLINK A850R, which can be exploited by an attacker to gain control of the server...

mx.dual-sim.cards Improper Access Control vulnerability OBB-2384878

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15178)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 has a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the ApCliKeyStr parameter...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15179)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the staticroutelist parameter...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15176)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

TOTOLINK Technology Routers Command Injection Vulnerability (CNVD-2022-17113)

TOTOLink T6 is a wireless dual-band router from TotoLink, China.TOTOLink T10 is a wireless network system router from TotoLink, China.The recvSlaveUpgstatus function of TOTOLINK Technology Routers T6 and T10 is vulnerable to command injection. vulnerability. An attacker can exploit this...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15177)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 contains a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the stationaccessenable parameter...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15175)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

D-Link Dir-823-Pro Command Injection Vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro 1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

ASUS CMAX6000 Information Disclosure Vulnerability

The ASUS Cmax6000 is a 4x4 dual-band Wifi cable modem router from Asus China. A security vulnerability exists in ASUS CMAX6000 v1.02.00, which can be exploited by an attacker to recover encrypted data via a hard-coded key...

D-Link DIR-X1860 Denial of Service Vulnerability (CNVD-2022-11517)

The D-Link Dir-X1860 is a dual-band router from D-Link, a Chinese company. A specially designed URL to an authenticated victim to reboot the router. The authenticated victim would need to access the URL in order for the router to reboot...

D-Link Dir-X1860 Denial of Service Vulnerability (CNVD-2022-38536)

The D-Link Dir-X1860 is a dual-band router from D-Link, a Chinese company. The D-Link DIR-X1860 suffers from a denial-of-service vulnerability that stems from the lack of HTTP packet authentication and filtering in the software web application leading to HTTP smuggling attacks, which can be...

D-Link Dir-823-Pro 命令注入漏洞

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the staticroutelist parameter...

Cisco Rv340 Dual Wan Gigabit Vpn Router 缓冲区错误漏洞

The Cisco Rv340 Dual Wan Gigabit Vpn Router is a dual WAN Gigabit Vpn router from Cisco. The Cisco RV340 Dual WAN Gigabit VPN Router suffers from a buffer error vulnerability that originates from a boundary error when processing an HTTP request, which can be exploited by a remote attacker to send...

Unauthorized Access Vulnerability in TOTOLINK A3002RU

The TOTOLINK A3002RU is a Gigabit dual band router. An unauthorized access vulnerability exists in the TOTOLINK A3002RU, which can be exploited by attackers to obtain sensitive information...

TP-Link TL-WA1201 Buffer Overflow Vulnerability

Tp-Link Tl-Wa1201 is a dual-band wireless access point from Tp-Link China. A buffer overflow vulnerability exists in the TP-Link TL-Wa1201 that stems from the product's failure to properly determine memory boundaries when processing DNS messages. An unauthenticated attacker could exploit this...

CVE-2022-22160

An Unchecked Error Condition vulnerability in the subscriber management daemon smgd of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service DoS. In a subscriber management / broadband edge environment if a single session group...

Huawei HarmonyOS SIM dual card management component sensitive information disclosure vulnerability

Huawei HarmonyOS is an operating system from Huawei of China. It provides a microkernel-based, fully distributed operating system. The Huawei HarmonyOS SIM dual card management component is vulnerable to sensitive information disclosure. An attacker could exploit the vulnerability to compromise...