8373 matches found
Default credentials
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...
CVE-2007-4389
Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters...
CVE-2007-4388
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...
CVE-2007-4387
CVE-2007-4387 affects 2Wire routers (1701HG, 2071) with software versions 3.17.5/5.29.51. The flaw is a cross-site request forgery on the /xslt page that allows an attacker to perform configuration changes as an administrator. Related public material (PacketStorm, Metasploit module) confirms a CS...
CVE-2007-4388
The provided connected documents confirm a vulnerability in 2wire 1701HG and 2071 Gateway routers running software 5.29.51 (and possibly 3.17.5), where a blank password is set by default. This implies potential unauthorized access to router management/settings if default credentials are not chang...
CVE-2007-4387
Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...
CVE-2007-4389
CVE-2007-4389 affects 2wire gateways (models 1701HG, 1800HW, 2071) with firmware 3.17.5, 3.7.1, and 5.29.51. A CSRF flaw in /xslt allows remote attackers to create DNS mappings as administrators, enabling DNS poisoning via NAME and ADDR parameters. The sources describe the affected products and t...
2wire routers crossite request forgery
Referer is not checked on configuration form submission...
Cross Site Request Forgery in 2wire routers
Cross Site Request Forgery in 2wire routers Vulnerable Routers: 1701HG, 2071 Gateway Software: v3.17.5, 5.29.51 Password Not Set default Greetz a la Comunidad Underground de Mйxico, y a los que me ayudaron a probarlo: Preth00nker, nitr0us, ... [email protected] I. Background ------------- This is the...
2wire-csrf.txt
Cross Site Request Forgery in 2wire routers Vulnerable Routers: 1701HG, 2071 Gateway Software: v3.17.5, 5.29.51 Password Not Set default Greetz a la Comunidad Underground de México, y a los que me ayudaron a probarlo: Preth00nker, nitr0us, ... [email protected] I. Background ------------- This is the...
2Wire Routers Cross-Site Request Forgery Vulnerability
Description Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Technologies Affected 2Wire 1701HG 3.17.5 2Wire 1701HG 3.7.1 2Wire 1701HG 5.29.51 2Wire 1800HW 3.17.5...
Cisco routers IOS Cisco Next Hop Resolution Protocol DoS
Crash on NHRP packets parsing...
Cisco routers IOS IPv6 information leakage
IPv6 header contains 16 bytes of non-initialized memory from router's address space...
Cisco VoIP routers multiple DoS conditions
Multiple vulnerabilities in implementation of SIP, MGCP, H.323 and RTP protocols. Device may be vulnerable even i protocol is not configured...
CVE-2007-4098
Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams...
CVE-2007-4098
Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams...
Cisco routers SSL DoS
Multiple vulnerabilities on SSL packets parsing...
IPv6 routing headers issue
The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network amplification between two routers...