Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

Design/Logic Flaw

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

Buffer overflow

Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors...

CVE-2021-20641

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

CVE-2021-20642

Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service DoS condition by sending a specially crafted URL...

CVE-2021-20642

CVE-2021-20642 concerns LOGITEC devices (notably LAN-W300N/RS). The root cause is an improper check/handling of exceptional conditions in the device firmware, enabling a remote attacker to trigger a denial-of-service by sending a specially crafted URL. Affected product set includes LAN-W300N/RS a...

CVE-2021-20641

CVE-2021-20641 is a CSRF vulnerability in LOGITEC LAN-W300N/RS that lets an attacker spoof an admin session and perform unintended device changes via a crafted URL. Public sources describe the impact as affecting administrative web access, enabling authentication hijacking and potentially changin...

CVE-2021-20640

Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors...

CVE-2021-20640

CVE-2021-20640 is a buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB. The root cause is a buffer overflow that could allow an attacker with administrative privileges to execute arbitrary OS commands via unspecified vectors. Affected device: LAN-W300N/PGRB (and related LOGITEC models per CV...

CVE-2021-20638

CVE-2021-20638 affects LOGITEC LAN-W300N/PGRB. The vulnerability is an OS command injection that allows an attacker with administrative privileges to execute arbitrary commands on the device via unspecified vectors. The CVSSv3 base score is 6.8 (MEDIUM ), with attack vector Adjacent, high privile...

CVE-2021-20639

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20638

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20639

The CVE-2021-20639 entry concerns LOGITEC LAN-W300N/PGRB with an OS command injection flaw. Connected sources confirm the issue is OS command injection (CWE-78) in LAN-W300N/PGRB that can be exploited by an attacker with administrative privileges to run arbitrary OS commands, from vectors not spe...

CVE-2021-20637

Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service DoS condition by sending a specially crafted URL...

CVE-2021-20637

CVE-2021-20637 affects LOGITEC LAN-W300N/PR5B and is caused by improper check or handling of exceptional conditions. A remote attacker can trigger a denial-of-service by sending a specially crafted URL. Public details in connected sources confirm the vulnerability, its exposure over network acces...

CVE-2021-20636

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

CVE-2021-20635

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

CVE-2021-20635

CVE-2021-20635 affects LOGITEC LAN-WH450N/GR. The vulnerability is an improper restriction of excessive authentication attempts, enabling an attacker within wireless range to recover the PIN and gain network access. The issue is documented across multiple feeds (NVD/Red Hat/JVN) with reported imp...

CVE-2021-20636

CVE-2021-20636 affects LOGITEC LAN-W300N/PR5B with a CSRF flaw that lets an attacker hijack administrator sessions via a specially crafted URL, potentially causing unintended device setting changes. The connected sources (Red Hat advisory, JVN entries, and CVE lists) confirm the vulnerability and...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s network authentication protocol, NTLM, is related to security flaws in its mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...