CVE-2022-45673

Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery CSRF via function fromSysToolRestoreSet...

PT-2022-27586 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the deviceMac parameter in the addWifiMacFilter function. This issue allows for potential exploitation. No information is provided about the estimated...

D-Link DHP-W310AV 操作系统命令注入漏洞

The D-Link DHP-W310AV is a wireless mini wireless extender from China-based AUO D-Link. An operating system command injection vulnerability exists in D-Link DHP-W310AV firmware version 3.10EU, which stems from its System Checks function that allows attackers to implement command injection...

Horner Automation Remote Compact Controller 加密问题漏洞

The Horner Automation Remote Compact Controller Horner Automation RCC is a compact controller from Horner Automation, USA. A vulnerability exists in Horner Automation Remote Compact Controller 972 firmware version 15.40 due to an encryption issue in the configuration file using weak XOR encryptio...

Tenda i22 跨站请求伪造漏洞

Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version V1.0.0.34687. An attacker can exploit this vulnerability to perform cross-site request forgery CSRF attacks via fromSysToolRestoreSet...

Tenda i22 跨站请求伪造漏洞

Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version V1.0.0.34687. An attacker can exploit this vulnerability to perform cross-site request forgery CSRF attacks via fromSysToolReboot...

CVE-2022-40265

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker...

CVE-2022-40265

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker...

Input validation

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker...

Tenda TX9 Pro 缓冲区错误漏洞

The Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda TX9 Pro firmware version v22.03.02.10, which stems from a list parameter in its /goform/SetIpMacBind component that allows an attacker to achieve a stack overflow...

CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

Realtek RTL8111FP-CG和RTL8168FP-CG 信任管理问题漏洞

The Realtek RTL8111EP-CG and Realtek RTL8168FP-CG are both Ethernet controllers. A trust management issue vulnerability exists in Realtek RTL8111EP-CG, RTL8111FP-CG Firmware versions prior to 3.0.0.2019090, which stems from the Dash feature having a hard-coded password that can be exploited by an...

Authentication flaw

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

CVE-2022-36133

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

EpsonTM-C3500和TM-C7500 授权问题漏洞

The Epson TM-C3500 and Epson TM-C7500 are both printers from the Japanese company Epson. A security vulnerability exists in Epson TM-C3500 and TM-C7500 firmware version WAM31500, which can be exploited by an attacker to bypass authentication...

CVE-2022-36133

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...

CVE-2022-44257

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function...

CVE-2020-23588

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to "Enable or Disable Ports" and to "Change port number" through " /rmtacc.asp "...

CVE-2020-23590

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery CSRF attack to change the Password for "WLAN SSID" through "wlwpa.asp"...

Cross site request forgery (csrf)

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Reset ONU to Factory Default through ' /mgmdevreset.asp.' Resetting to default leads to Escalation o...