PT-2023-8386 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.2 Description: The issue is related to a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords. This is due to the lack of authentication for a critica...

Juplink RX4-1500 Command Injection Vulnerability

Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router that originates from a command injection vulnerability in the homemng.htm endpoint. An attacker can exploit the vulnerability by sending a specially crafted request to execute...

Juplink RX4-1500 Command Injection Vulnerability

Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router that stems from a command injection vulnerability in the homemng.htm endpoint. An attacker can exploit the vulnerability by sending a specially crafted HTTP request to execute...

Juplink Intelligent Technologies RX4-1500 缓冲区错误漏洞

The Juplink Intelligent Technologies RX4-1500 is a wireless router from Juplink Intelligent Technologies. A buffer error vulnerability exists in the Juplink Intelligent Technologies RX4-1500 versions 1.0.2 through 1.0.5, which stems from the presence of a stack-based buffer overflow that can be...

Cross-Site Scripting Vulnerability in Multiple NEC Aterm Products

The NEC Aterm WG2600HP and others are a wireless router from NEC Corporation of Japan. A cross-site scripting vulnerability exists in multiple Aterm products, which stems from a lack of proper validation of client-side data by the WEB application. The vulnerability can be exploited by an attacker...