CVE-2004-1540

ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file...

CVE-2004-1540

CVE-2004-1540 affects ZyXEL Prestige routers (623, 650, 652) where HTTP Remote Administration is enabled. The vulnerability exists because access to the page “/rpFWUpload.html” does not require authentication, enabling a remote attacker to reset the router configuration to its factory state. Docu...

Multiple Cisco routers IOS DoS vulnerabilities

Malcrafted IPv6, BGP or MPLS packets can cause router to reboot...

Crafted Packet Causes Reload on Cisco Routers

...

Juniper JunOS Routing Engine MPLS denial of service

Overview Juniper routers will become severely disrupted when attacked with specially-crafted MPLS packets. Description Juniper routers running JUNOS have a vulnerability in which specially-crafted MPLS packets can cause normal operation of affected routers to be severely disrupted.According to...

CVE-2004-1540

ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file...

CVE-2004-1685

SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setupstatus.htm or status.HTM pages...

Dynalink routers backdoor account

Built in account userNotUsed with userNotU password...

Dynalink routers backdoor?

I was playing with a Dynalink RTA 230 http://www.dynalink.co.nz/products/rta230.htm, a linux based mips-cored adsl router. Looking at embedded linux system, i've found something like a backdoor: cat /etc/passwd admin:xxxxxobscuredxxxxx:0:0:Administrator:/:/bin/sh...

CVE-2004-0580

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information...

CVE-2004-0674

Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service crash via a packet with the IP record route option set...

CVE-2004-0674

CVE-2004-0674 affects Enterasys XSR-1800 series Security Routers running firmware 7.0.0.0 with Policy-Based Routing. A remote attacker can cause a denial of service (crash) by sending a packet with the IP record route option set. The NVD entry shows a base score of 5.0 (medium) with network attac...

CVE-2004-0580

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information...

D-Link AirPlus DI-614+ DI-624 DI-704 - DHCP Log HTML Injection

D-Link AirPlus DI-614+ DI-624 DI-704 - DHCP Log HTML Injection source: https://www.securityfocus.com/bid/10587/info It is reported that the DI-614+, DI-704, and the DI-624 are susceptible to an HTML injection vulnerability in their DHCP log. An attacker who has access to the wireless, or internal...

D-Link AirPlus DI-614+ / DI-624 / DI-704 - DHCP Log HTML Injection

source: https://www.securityfocus.com/bid/10587/info It is reported that the DI-614+, DI-704, and the DI-624 are susceptible to an HTML injection vulnerability in their DHCP log. An attacker who has access to the wireless, or internal network segments of the router can craft malicious DHCP...

Linksys multiple routers buffer overflow

Buffer overflow during Web interface authentication...

[Full-Disclosure] DoS vuln in various versions of Linksys routers.

Denial of Service Vulnerability in Linksys BEFSR41 - Router vuln was identified and tested on. Linksys BEFSR41 v3 Linksys BEFSRU31 Linksys BEFSR11 Linksys BEFSX41 Linksys BEFSR81 v2/v3 Linksys BEFW11S4 v3 Linksys BEFW11S4 v4 Available from www.linksys.com October 19, 2003 Revised November 10, 200...

[EXPL] Linksys BOOTP Memory Leak

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SMC routers unauthorized access

Administration web interface TCP/1900 is available from WAN without authentication...

[NEWS] SMC Routers Passwordless Remote Administration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...