CVE-2019-11418

CVE-2019-11418 affects the TRENDnet TEW-632BRP router (firmware around 1.010B32) and describes a buffer overflow in apply.cgi triggered by long strings sent to the SOAPACTION:HNAP1 interface. Multiple connected records corroborate the affected product and vulnerability pattern; no explicit exploi...

CVE-2019-9119

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

Command injection

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

PT-2019-19372

Name of the Vulnerable Software and Affected Versions Motorola C1 version 1.01 Motorola M2 version 1.07 Description A Command Injection issue allows a remote attacker to execute arbitrary code and gain a root shell. This occurs through a crafted /HNAP1 POST request, where the SetNTPServerSettings...

CVE-2019-9119: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2019-9120: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

PT-2019-19375

Name of the Vulnerable Software and Affected Versions Motorola C1 version 1.01 Motorola M2 version 1.07 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs through a crafted /HNAP1 POST request,...

PT-2019-19373

Name of the Vulnerable Software and Affected Versions Motorola C1 version 1.01 Motorola M2 version 1.07 Description A Command Injection issue allows a remote attacker to execute arbitrary code and gain a root shell. This occurs through a crafted /HNAP1 POST request, where the SetStaticRouteSettin...

CVE-2019-9118: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2019-9117: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2019-9124

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...

CVE-2019-9124

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...

Default credentials

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...

CVE-2019-9124

The CVE-2019-9124 entry affects D-Link DIR-878 (firmware 1.12B01). A vulnerability at the /HNAP1 URI allows login with a blank password due to weaknesses in HNAP1 authentication. This enables network-accessible (remote) compromise of confidentiality, integrity, and availability. Several sources c...

CVE-2019-9124

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...

D-Link DIR-878 Empty Password Login Vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the /HNAP1 URI in the D-Link DIR-878 version 1.12B01. The vulnerability can be exploited by an attacker to log in to the device with the help of an empty password...

CVE-2019-9124: Improper Authentication

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...

The vulnerability of the GetNetworkTomographyResult function in the microprogramming software of the D–Link DIR-823G router allows a hacker to execute arbitrary commands on the operating system.

The vulnerability of the GetNetworkTomographyResult function in the microprogramming software of the D–Link DIR-823G router is related to insufficient cleaning of input data used in commands. Exploiting this vulnerability can allow an attacker to execute arbitrary operating system commands by...

Command injection

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

Command injection

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...