Lucene search
+L

201 matches found

Positive Technologies
Positive Technologies
added 2025/02/23 12:0 a.m.12 views

PT-2025-7675 · Lb Link · Lb-Link Ac1900 Router

Name of the Vulnerable Software and Affected Versions: LB-LINK AC1900 Router version 1.0.2 Description: The issue concerns an os command injection vulnerability, specifically affecting the /goform/set blacklist endpoint, where the mac and enable variables are involved. Recommendations: For LB-LIN...

6.5CVSS6.8AI score0.1294EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.59 views

The vulnerability of the /etc/shadow file in microprogramming-based router software like LB-LINK allows a hacker to gain unauthorized access to protected information.

The vulnerability of the /etc/shadow file in microprogramming-based router software like LB-LINK lies in the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

10CVSS5.5AI score0.00574EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/11/01 5:15 p.m.12 views

CVE-2024-51431

LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable...

9.8CVSS5.8AI score0.00574EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.9 views

LB-LINK BL-WR 1300H 安全漏洞

The LB-LINK BL-WR 1300H is a wireless dual-band gigabit router from China Bilink LB-LINK. A security vulnerability exists in the LB-LINK BL-WR 1300H version v.1.0.4, which stems from the use of hard-coded credentials in /etc/shadow...

9.8CVSS6.8AI score0.00574EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/01 12:0 a.m.36 views

CVE-2024-51431

LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable...

0.00574EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/01 12:0 a.m.16 views

CVE-2024-51431

LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable...

6.9AI score0.00574EPSS
SaveExploits1References2
CVE
CVE
added 2024/11/01 12:0 a.m.61 views

CVE-2024-51431

The CVE-2024-51431 entry affects LB-LINK BL-WR 1300H v1.0.4, where hardcoded credentials are stored in /etc/shadow and are easily guessable. Public records (NVD and related feeds) consistently describe this as a credential exposure with high to critical impact potential (CVE details: high confide...

9.8CVSS6.7AI score0.00574EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.15 views

PT-2024-8002 · Lb Link · Lb-Link Bl-Wr 1300H

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-WR 1300H version 1.0.4 Description: The issue is related to hardcoded credentials stored in the /etc/shadow file of the LB-LINK BL-WR 1300H router. These credentials are easily guessable, which could allow a remote attacker to gain...

9.8CVSS7.1AI score0.00574EPSS
SaveExploits1References9
NVD
NVD
added 2024/06/14 4:15 p.m.21 views

CVE-2024-33373

An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. This vulnerability can allow attackers to access the router via a brute-force attack...

6.3CVSS0.00301EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/14 3:15 p.m.24 views

CVE-2024-33377

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

8.1CVSS0.00442EPSS
SaveExploits1References2
NVD
NVD
added 2024/06/14 3:15 p.m.21 views

CVE-2024-33375

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware...

9.8CVSS0.00619EPSS
SaveExploits1References2
NVD
NVD
added 2024/06/14 3:15 p.m.16 views

CVE-2024-33374

Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...

9.8CVSS0.00539EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/14 12:0 a.m.15 views

CVE-2024-33373

An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. This vulnerability can allow attackers to access the router via a brute-force attack...

7AI score0.00301EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.7 views

LB-LINK BL-W1210M Security Breach

LB-LINK BL-W1210M is a wireless router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-W1210M v2.0, which stems from incorrect access control...

9.8CVSS6.8AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/14 12:0 a.m.9 views

PT-2024-25221 · Lb Link · Lb-Link Bl-W1210M

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-W1210M version 2.0 Description: The issue is related to incorrect access control in the UART/Serial interface, allowing attackers to access the root terminal without authentication. This enables unauthorized access to the system...

9.8CVSS6.6AI score0.00539EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/06/14 12:0 a.m.13 views

CVE-2024-33374

Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...

6.9AI score0.00539EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/14 12:0 a.m.17 views

CVE-2024-33375

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware...

7.1AI score0.00619EPSS
SaveExploits1References2
CVE
CVE
added 2024/06/14 12:0 a.m.47 views

CVE-2024-33374

CVE-2024-33374 affects the LB-LINK BL-W1210M v2.0 router. The issue is an incorrect access control in the UART/Serial interface that allows attackers to reach the root terminal without authentication. The CVSS base score is 9.8 (CRITICAL) with NETWORK attack vector, low complexity, no privileges ...

9.8CVSS7.2AI score0.00539EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/14 12:0 a.m.11 views

CVE-2024-33377

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

7.4AI score0.00442EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.12 views

LB-LINK BL-W1210M Security Breach

LB-LINK BL-W1210M is a wireless router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-W1210M version v2.0, which originates from storing user credentials in plain text...

9.8CVSS6.8AI score0.00619EPSS
SaveExploits1References2
Rows per page
Query Builder