CVE-2023-28337: Unrestricted Upload of File with Dangerous Type

When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...

CVE-2020-22654: Download of Code Without Integrity Check

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...

CVE-2022-46914

An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image...

CVE-2022-46434

An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image...

TP-Link TL-WA901N 安全漏洞

The TP-LINK TL-WA901N is a wireless access point from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WA901ND V1 v3.11.2 and earlier versions, and TL-WA901N V2 v3.12.16 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial ...

NETGEAR WNR2000 命令注入漏洞

The NETGEAR WNR2000v1 Router is a single-band wireless router based on the IEEE 802.11n standard . A denial of service vulnerability exists in the NETGEAR WNR2000v1 Router. An attacker can exploit this vulnerability to cause a denial of service by uploading a specially crafted firmware image...

CVE-2022-46139

TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process...

PT-2022-27872 · Tp Link · Tp-Link Tl-Wr743Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR743ND V1 versions prior to 3.12.20 Description: An exploitable firmware modification vulnerability was discovered, allowing an attacker to conduct a Man-in-the-Middle MITM attack to modify the user-uploaded firmware image and...

CVE-2022-46434: Undefined Security Weakness

An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image...

PT-2022-27868 · NetGear · Netgear Xwn5001 Powerline 500 Wifi Access Point

Name of the Vulnerable Software and Affected Versions: Netgear XWN5001 Powerline 500 WiFi Access Point versions v0.4.1.1 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a...

PT-2022-28008

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N / TL-WA841ND V7 versions 3.13.9 and earlier Description An issue in the firmware update process allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image. Recommendatio...

CVE-2022-46914: Undefined Security Weakness

An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image...

CVE-2022-46435: Undefined Security Weakness

An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image...

CVE-2022-46430: Download of Code Without Integrity Check

TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process...

CVE-2022-38956

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.11.1.9 and earlier...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/form2userconfig.cgi...

D-Link DIR-816 安全漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 firmware A2v1.10CNB04.img image, which originates from a buffer overflow in its /goform/addRouting component...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

Hyundai Uses Example Keys for Encryption System

This is a dumb crypto mistake I had not previously encountered: A developer says it was possible to run their own software on the car infotainment hardware after discovering the vehicles manufacturer had secured its system using keys that were not only publicly known but had been lifted from...

CVE-2021-26382

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor ACP, irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service...