66 matches found
TOTOLINK LR1200GB 安全漏洞
The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's Gion Electronics TOTOLINK. The TOTOLINK LR1200GB version V9.1.0u.6619B20230130 suffers from a buffer overflow vulnerability that originates from a boundary error in the parameter password of the function loginAuth when...
The vulnerability of the Multicast Leaf Recycle Elimination (mLRE) function in the Cisco IOS XE operating system for Cisco ASR Series 1000 routers allows a attacker to trigger a service failure.
The vulnerability of the Multicast Leaf Recycle Elimination mLRE function in the Cisco IOS XE router operating system from the Cisco ASR series 1000 is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to trigger a service failure...
D-Link DIR-619L Buffer Overflow Vulnerability
D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability, which originates from the curTime...
CVE-2022-0650
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...
CVE-2022-38452
A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...
PT-2023-4729 · NetGear · Netgear R6400V2
Name of the Vulnerable Software and Affected Versions: NETGEAR R6400v2 versions prior to 1.0.4.118 Description: The issue is related to a Buffer Overflow in the httpd service of the NETGEAR R6400v2 Wi-Fi router's firmware, which can be exploited by remote unauthenticated attackers to execute...
The vulnerability of the soapcgi_main() function in the D-Link DIR-859 A1 router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the soapcgimain function in the D-Link DIR-859 A1 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Tenda AC1200 authorization error vulnerability
Tenda AC1200 is a wireless router from Tenda, China. Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 is vulnerable to an authorization error. An authenticated attacker can use this vulnerability to read the router's syslog.log file, which contains the MD5 password for the administrator user...
The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a attacker to execute arbitrary code.
The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software lies in the copying of a buffer without checking the size of the input data during the processing of the HNAPAUTH header. Exploiting this vulnerability allows an...
CVE-2022-42060
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data...
CVE-2022-42060
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data...
PT-2022-5712 · NetGear · Netgear R7000P
Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.1.64 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's software. It can be exploited by a remote attacker to cause a denial of service. The buffer overflow is specifically...
EUVD-2022-39456
DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php...
D-Link DSL-2888A Default Configuration Issue Vulnerability
The D-link DSL-2888A is a Unified Services Router from D-link China. A default configuration issue vulnerability exists in the D-Link DSL-2888A devices, which can be exploited by an attacker to access system folders and download sensitive files e.g., password hash files...
Information Disclosure Vulnerability in Syrotech EPON SY-GPON-1110-WDAONT
The EPON SY-GPON-1110-WDAONT is a router. An information disclosure vulnerability exists in the Syrotech EPON SY-GPON-1110-WDAONT, which can be exploited by attackers to obtain sensitive information...
CVE-2020-11959
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50...
D-Link DSL-2640B B2 Authorization Issue Missing
The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2640B B2 EU4.01B version. An attacker can exploit this vulnerability by accessing the cgi module to bypass authentication and perform administrative operations e.g.,...
D-Link DSL-2875AL Information Disclosure Vulnerability
The D-Link DSL-2875AL is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2875AL prior to version 1.00.05. The vulnerability can be exploited by an attacker to obtain a password by sending a simple /romfile.cfg request to the web management...
CVE-2020-9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected...
Teltonika RUT950 Denial of Service Vulnerability
Teltonika RUT950 is a LET router product from Teltonika Lithuania. A security vulnerability exists in Teltonika RTU950 version R31.04.89. An attacker can exploit the vulnerability to cause denial of service memory and free space consumption...