2WIRE Routers - H04_POST Access Validation

2WIRE Routers - H04POST Access Validation source: https://www.securityfocus.com/bid/27516/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this...

2WIRE Routers - 'H04_POST' Access Validation

source: https://www.securityfocus.com/bid/27516/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this issue to change the password of arbitrary...

JVN#88575577 Multiple Yamaha routers vulnerable to cross-site request forgery

Multiple Yamaha routers provide a web-based interface for users to configure the settings of the routers. The web interface is vulnerable to cross-site request forgery. Impact If the administrator views a malicious website while logged onto the web interface, the password and other configuration...

2WIRE Routers - Cross-Site Request Forgery

2WIRE Routers - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password...

2WIRE Routers - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...

SunOS 5.10 - Remote ICMP Kernel Crash

/ SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope Null Pointer Dereference in Kernel Space Seems to work only if attacked in the same network segment, maybe because of firewalls/routers in place. This seems to be the issue described in bid 22323. / include include include include include...

ZyXEL P-330W routers crossite scripting

Crossite scripting in Web administration interface...

Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module Advisory ID: cisco-sa-20071219-fwsm ============ Revision 1.0 ============ Last Updated 2007 December 19 1600 UTC GMT For Public Release 2007 December 19...

JVN#71872818 AirStation series and BroadStation series vulnerable to cross-site request forgery

Buffalo's AirStation series and BroadStation series routers have a web administration interface that can be accessed from a web browser to configure their functional settings. The web administration interface is vulnerable to cross-site request forgery. Impact If the administrator of such a produ...

Cisco routers IOS LPD server buffer overflows

Buffer overflow if oversized local hostname is set...

Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability

Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...

CVE-2007-4389

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters...

Default credentials

2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...

CVE-2007-4387

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...

CVE-2007-4389

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters...

CVE-2007-4387

CVE-2007-4387 affects 2Wire routers (1701HG, 2071) with software versions 3.17.5/5.29.51. The flaw is a cross-site request forgery on the /xslt page that allows an attacker to perform configuration changes as an administrator. Related public material (PacketStorm, Metasploit module) confirms a CS...

CVE-2007-4388

2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...

CVE-2007-4388

The provided connected documents confirm a vulnerability in 2wire 1701HG and 2071 Gateway routers running software 5.29.51 (and possibly 3.17.5), where a blank password is set by default. This implies potential unauthorized access to router management/settings if default credentials are not chang...

CVE-2007-4389

CVE-2007-4389 affects 2wire gateways (models 1701HG, 1800HW, 2071) with firmware 3.17.5, 3.7.1, and 5.29.51. A CSRF flaw in /xslt allows remote attackers to create DNS mappings as administrators, enabling DNS poisoning via NAME and ADDR parameters. The sources describe the affected products and t...