CVE-2021-20638

CVE-2021-20638 affects LOGITEC LAN-W300N/PGRB. The vulnerability is an OS command injection that allows an attacker with administrative privileges to execute arbitrary commands on the device via unspecified vectors. The CVSSv3 base score is 6.8 (MEDIUM ), with attack vector Adjacent, high privile...

CVE-2021-20639

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20638

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20637

CVE-2021-20637 affects LOGITEC LAN-W300N/PR5B and is caused by improper check or handling of exceptional conditions. A remote attacker can trigger a denial-of-service by sending a specially crafted URL. Public details in connected sources confirm the vulnerability, its exposure over network acces...

CVE-2021-20637

Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service DoS condition by sending a specially crafted URL...

CVE-2021-20635

CVE-2021-20635 affects LOGITEC LAN-WH450N/GR. The vulnerability is an improper restriction of excessive authentication attempts, enabling an attacker within wireless range to recover the PIN and gain network access. The issue is documented across multiple feeds (NVD/Red Hat/JVN) with reported imp...

CVE-2021-20636

CVE-2021-20636 affects LOGITEC LAN-W300N/PR5B with a CSRF flaw that lets an attacker hijack administrator sessions via a specially crafted URL, potentially causing unintended device setting changes. The connected sources (Red Hat advisory, JVN entries, and CVE lists) confirm the vulnerability and...

CVE-2021-20636

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

CVE-2021-20635

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

CVE-2021-20642: Undefined Security Weakness

Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service DoS condition by sending a specially crafted URL...

CVE-2021-20639: Improper Neutralization of Special Elements used in an OS Command

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20640: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors...

CVE-2021-20638: Improper Neutralization of Special Elements used in an OS Command

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20637: Undefined Security Weakness

Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service DoS condition by sending a specially crafted URL...

CVE-2021-20635: Improper Restriction of Excessive Authentication Attempts

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

CVE-2021-20636: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

PT-2021-14099

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: The issue allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. There is no information provided about the estimated numb...

PT-2021-14100

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: The issue allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. There is no information provided about the estimated numb...

CVE-2021-20641: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

PT-2021-14101

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: A buffer overflow issue allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors. There is no information provided about th...