CVE-2025-8834

A vulnerability has been found in JCG Link-net LW-N915R 17s.20.001.908. Affected is an unknown function of the file /wireless/basic.asp of the component Wireless Basic Settings Page. The manipulation of the argument Network Name leads to cross site scripting. It is possible to launch the attack...

CVE-2025-8834 JCG Link-net LW-N915R Wireless Basic Settings basic.asp cross site scripting

A vulnerability has been found in JCG Link-net LW-N915R 17s.20.001.908. Affected is an unknown function of the file /wireless/basic.asp of the component Wireless Basic Settings Page. The manipulation of the argument Network Name leads to cross site scripting. It is possible to launch the attack...

CVE-2025-8834

The CVE-2025-8834 entry concerns JCG Link-net LW-N915R (firmware 17s.20.001.908) and affects the Wireless Basic Settings Page (/wireless/basic.asp). The issue is an input handling flaw in the Network Name parameter that enables cross-site scripting (XSS). Exploitation is described as remote; atta...

PT-2025-32524 · Jcg · Jcg Link-Net Lw-N915R

Name of the Vulnerable Software and Affected Versions: JCG Link-net LW-N915R version 17s.20.001.908 Description: A vulnerability exists in the Wireless Basic Settings Page component of JCG Link-net LW-N915R version 17s.20.001.908. Manipulation of the Network Name argument in the /wireless/basic.a...

JCG Link-net LW-N915R 代码注入漏洞

The JCG Link-net LW-N915R is a router from the Chinese company Jiexi JCG. A code injection vulnerability exists in JCG Link-net LW-N915R version 17s.20.001.908, which stems from improper manipulation of the Network Name parameter and could lead to a cross-site scripting attack...

CVE-2025-8834: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in JCG Link-net LW-N915R 17s.20.001.908. Affected is an unknown function of the file /wireless/basic.asp of the component Wireless Basic Settings Page. The manipulation of the argument Network Name leads to cross site scripting. It is possible to launch the attack...

VulnCheck KEV: CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

Default credentials

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

CVE-2018-16752

The LINK-NET LW-N605R device, running firmware 12.20.2.1486 , is vulnerable to Remote Code Execution (RCE) . The flaw exists in the ping feature located at adm/systools.asp, where shell metacharacters in the HOST field are not properly neutralized, allowing for command injection. While authentica...

CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

CVE-2018-16752: Improper Neutralization of Special Elements used in an OS Command

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

PT-2018-13720

Name of the Vulnerable Software and Affected Versions LINK-NET LW-N605R version 12.20.2.1486 Description The issue allows for remote code execution via shell metacharacters in the HOST field of the ping feature at "adm/systools.asp". Authentication is required, but the default password for the...

LinkNet LW-N605R 12.20.2.1486 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Title: LW-N605R 12.20.2.1486 - Remote Code Execution Author: Nassim Asrir Vendor: LINK-NET Product Link: http://linknet-usa.com/main/productinfo.php?productsid=35&language=es Firmware version: 12.20.2.1486 CVE: N/A Description: LW-N605R...