Lucene search
+L

12 matches found

Vulnrichment
Vulnrichment
added 2026/01/28 5:35 p.m.5 views

CVE-2020-36963 Intelbras Router RF 301K 1.1.2 - Authentication Bypass

Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...

8.7CVSS5.9AI score0.00364EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:48 a.m.11 views

CVE-2020-24987

Tenda AC18 Router through V15.03.05.05EN and through V15.03.05.196318 CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck function in /usr/lib/lua/ngxauthserver/ngxwdas.lua file if the administrator UI Interface is set to "radius"...

9.8CVSS8.1AI score0.03104EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:7 a.m.20 views

CVE-2020-10923

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000. A...

8.8CVSS7.2AI score0.84676EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.8 views

The vulnerability of TOTOLINK A3300R router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and change Wi-Fi passwords.

The vulnerability of TOTOLINK A3300R router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and change the Wi-Fi password by resetting it on the /wizard.html or...

7.8CVSS7.2AI score0.00537EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/17 12:0 a.m.18 views

CVE-2023-37057

An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism...

8.3AI score0.00919EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/06/17 12:0 a.m.31 views

CVE-2023-37057

An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism...

0.00919EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/28 12:0 a.m.9 views

CVE-2022-24973

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

6.8CVSS8.1AI score0.00724EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/07 12:0 a.m.7 views

Cisco Small Business 授权问题漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers, which stems from a vulnerability in the authentication feature of the IPSec VPN server, which can be exploited by an attacker to bypass the...

9.8CVSS8.5AI score0.0087EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.9 views

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

10CVSS8.2AI score0.82863EPSS
SaveExploits8References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.8 views

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

10CVSS8.2AI score0.82863EPSS
SaveExploits8References8
0day.today
0day.today
added 2016/04/27 12:0 a.m.145 views

RomPager 4.34 - Misfortune Cookie Router Authentication Bypass

Exploit for hardware platform in category web applications Title: Misfortune Cookie Exploit RomPager = 4.34 router authentication remover Date: 17/4/2016 CVE: CVE-2015-9222 http://mis.fortunecook.ie Vendors: ZyXEL,TP-Link,D-Link,Nilox,Billion,ZTE,AirLive,... Vulnerable models:...

7.8AI score0.63748EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2015/12/04 12:0 a.m.41 views

Linksys EA6100 Wireless Router Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-006 : Linksys EA6100 Wireless Router Authentication Bypass Title: Linksys EA6100 Wireless Router Authentication Bypass Advisory ID: KL-001-2015-006 Publication Date: 2015.12.04 Publication URL:...

0.6AI score
SaveExploits0
Rows per page
Query Builder