CVE-2019-19506

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot...

Code injection

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system wi...

Denial of service

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot...

CVE-2019-19505

CVE-2019-19505 affects the Tenda PA6 Wi‑Fi Powerline extender (firmware 1.0.1.21). The web UI’s Wireless section accepts a specially crafted hostname, triggering a stack-based buffer overflow that could allow remote code execution or crash. Threat analysis notes the flaw requires an authenticated...

CVE-2019-19505

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or...

CVE-2019-19506

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot...

CVE-2019-19506

The CVE-2019-19506 entry concerns the Tenda PA6 Wi‑Fi Powerline extender (version 1.0.1.21). The vulnerability resides in the homeplugd process and is triggered by sending a specially crafted UDP packet to cause a reboot (pre-auth Denial of Service). ThreatPost reports the device exposes a web UI...

CVE-2019-16213

CVE-2019-16213—Tenda PA6 Powerline extender is affected. The web server in firmware 1.0.1.21 allows an authenticated user to inject commands by changing the name of an attached PLC device, because the input is concatenated to a system command without validation, yielding root-level code execution...

Security Bulletin: Security vulnerability in WAS Liberty used by IBM Transformation Extender Advanced (CVE-2017-1681)

Summary A security vulnerability was found in WebSphere Application Server Liberty Profile used by IBM Transformation Extender Advanced. The vulnerability has been addressed. Vulnerability Details CVEID: CVE-2017-1681 DESCRIPTION: IBM WebSphere Application Server IBM Liberty for Java for Bluemix...

Security Bulletin: Multiple vulnerabilities in IBM Java shipped with IBM Transformation Extender Advanced

Summary Multiple vulnerabilities with IBM Java version shipped with IBM Transformation Extender Advanced. These vulnerabilities have been addressed. Vulnerability Details CVEID: CVE-2018-2663 DESCRIPTION: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE...

Security Bulletin: Multiple vulnerabilities in IBM Java shipped with IBM Transformation Extender Advanced (CVE-2018-1656, CVE-2018-12539)

Summary There are multiple vulnerabilities in IBM Java shipped with IBM Transformation Extender Advanced. These vulnerabilities have been addressed. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java...

Wavlink WL-WN530HG4 Information Disclosure Vulnerability (CNVD-2020-41784)

WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WL-WN530HG4 M30HG4.V5030.191116 version. The vulnerability can be exploited by an attacker to obtain the current administrator password in plaintext form in t...

CVE-2020-10916

The CVE-2020-10916 issue affects TP-Link TL-WA855RE Wi‑Fi extenders (firmware 855rev4-up-ver1-0-1-P1). The root cause is improper validation during the first-time setup flow, enabling a network-adjacent attacker to bypass authentication, reset the Admin password, and execute code on the device. M...

TP-Link TL-WA855RE login.json Authentication Privilege Elevation Improper Vulnerability

The TP-Link TL-WA855RE is a wireless network signal extender from China P&L TP-Link. A security vulnerability exists in the initial setup process in the TP-Link TL-WA855RE, which stems from the program failing to properly validate the initial setup request. The vulnerability can be exploited by a...

TP-Link TL-WA855RE login.json Improper Authentication Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Wi-Fi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28109)

NETGEAR R7800 and others are products of NETGEAR Corporation.NETGEAR R7800 is a wireless router.NETGEAR EX2700 is a wireless network signal extender.NETGEAR WN3000RP is a wireless network signal extender.NETGEAR WN3000RP is a wireless network signal extender.NETGEAR WN3000RP is a wireless network...

NETGEAR DST6501 and WNR2000 Information Disclosure Vulnerability

NETGEAR WNR2000 and NETGEAR DST6501 are both products of NETGEAR, Inc. NETGEAR WNR2000 is a wireless router and NETGEAR DST6501 is a wireless extender adapter.NETGEAR DST6501 versions prior to 1.1.0.6 and A security vulnerability exists in versions prior to WNR2000v2 1.2.0.8. An attacker could...

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution

Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Date: 2020-04-13 Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...

CVE-2020-8861

The CVE-2020-8861 issue affects D-Link DAP-1330 1.10B01 BETA Wi‑Fi range extenders. It arises from incorrect handling of HNAP login requests and cookies, enabling network‑adjacent attackers to bypass authentication. The vulnerability has been described as allowing the attacker to execute arbitrar...