Weak password vulnerability in SINDOH N600

Founded in 1960, Xindu Qingdao Office Systems Co., Ltd. is a multinational company specializing in the production of office automation equipment based on digital network. A weak password vulnerability exists in SINDOH N600, which can be exploited by attackers to obtain sensitive information...

Belkin N600 Spoofing Vulnerability

Belkin N600 is a wireless dual-band router product. Belkin F9K1102 2 device firmware version 2.10.17 uses an incorrect algorithm when selecting the ID value within the DNS query header. This could allow a remote attacker to exploit this vulnerability for response spoofing by predicting the value...

Belkin N600 DB Wireless Dual Band N+ Security Bypass Vulnerability

Belkin N600 DB Wireless Dual Band N+ is a wireless dual band router product from Belkin USA. The Belkin N600 DB Wireless Dual Band N+ has a security vulnerability that allows an attacker to intercept packets containing the 'LockStatus:1' and 'LoginSuccess:0' strings on the embedded server side of...

Belkin N600 DB Wireless Dual Band N+ Management Interface No Password Setting Vulnerability

Belkin N600 DB Wireless Dual Band N+ is a wireless dual band router product from Belkin USA. The Belkin N600 DB Wireless Dual Band N+ fails to set a default password for the web management interface, allowing an attacker to gain access to the web management interface or perform cross-site request...

NETGEAR N600 WIRELESS DUAL BAND WNDR3400 - Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware Version: Firmware Version 1.0.0.38 AND...

CERT Warns of Slew of Bugs in Belkin N600 Home Routers

The CERT/CC is warning users that some Belkin home routers contain a number of vulnerabilities that could allow an attacker to spoof DNS responses, intercept credentials sent in cleartext, access the web management interface, and take other actions on vulnerable routers. The vulnerabilities affec...

Sitecom N300/N600 Devices - Multiple Vulnerabilities

No description provided by source. Multiple vulnerabilities on Sitecom N300/N600 devices ===================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on Sitecom N300/N600 devices Discovery date: 01/06/2013 Release date: 19/08/2013 Credits: Roberto...

NETGEAR N600 WIRELESS DUAL BAND WNDR3400 - Multiple Vulnerabilities

No description provided by source. Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware...

CVE-2013-4772

CVE-2013-4772 affects D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02. The issue allows remote attackers to bypass authentication by sending a direct request while a legitimate session is active, effectively giving admin access to the web management co...

Netgear N600 Password Disclosure / Account Reset

Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware Version: Firmware Version 1.0.0.38 AND...

Netgear WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware Version: Firmware Version 1.0.0.38 AND...

Sitecom N300/N600 Devices - Multiple Vulnerabilities

Multiple vulnerabilities on Sitecom N300/N600 devices Sitecom N300/N600 Devices - Multiple Vulnerabilities AFFECTED PRODUCTS We confirm the presence of the security vulnerability on the following products/firmware versions: Sitecom WLM-3500 v2 001, firmware 1.07 Sitecom WLM-5500 v1 001, firmware...

Multiple vulnerabilities on Sitecom N300/N600 devices

Multiple vulnerabilities on Sitecom N300/N600 devices ===================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on Sitecom N300/N600 devices Discovery date: 01/06/2013 Release date: 19/08/2013 Credits: Roberto Paleari [email protected],...

Sitecom N300 / N600 Access Bypass

Multiple vulnerabilities on Sitecom N300/N600 devices ===================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on Sitecom N300/N600 devices Discovery date: 01/06/2013 Release date: 19/08/2013 Credits: Roberto Paleari [email protected],...

Update: Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials

Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmware 1.05.12 N900C Firmware 1.06.18 N900C Firmware 1.06.28 CVE...

Western Digital My Net Devices Information Disclosure Vulnerability

Western Digital My Net Router is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Western Digital My Net Wireless Routers - Password Disclosure

Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmware 1.05.12 N900C Firmware 1.06.18 N900C Firmware 1.06.28 CVE...

CVE-2013-5006

maininternet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code...

CVE-2013-5006

The CVE-2013-5006 issue affects Western Digital My Net Series Wireless Routers (N600, N750, N900, N900C) across several firmwares (N600/N750: 1.03.12, 1.04.16; N900/N900C: 1.05.12, 1.06.18, 1.06.28). The vulnerability is an information disclosure in the web server: the admin password is stored in...