CVE-2017-9522

The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...

CVE-2017-9476

The CVE-2017-9476 entry concerns Cisco DPC3939 and Arris TG1682G devices (Comcast firmware on Cisco DPC3939 and eMTA/DOCSIS TG1682G) where a vulnerability allows remote attackers to determine the hidden SSID and passphrase of a Home Security Wi‑Fi network. Public detail in connected sources confi...

CVE-2017-9522

The Technicolor TC8717T router firmware from Time Warner is affected by CVE-2017-9522: the default Wi‑Fi passphrase is derived from the SSID and BSSID, allowing remote attackers with network access to read beacon frames and gain access. The vulnerability stems from the passphrase derivation, yiel...

PT-2017-18949

Name of the Vulnerable Software and Affected Versions Cisco DPC3939 version dpc3939-P20-18-v303r20421733-160420a-CMCST Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682 2.2p7s2 PROD sey Description The...

CVE-2017-9476: Exposure of Sensitive Information to an Unauthorized Actor

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...

CVE-2017-11647

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

CVE-2017-11647: Improper Neutralization of Input During Web Page Generation

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

PT-2017-12146

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8 Description The issue allows for stored cross-site scripting attacks. By creating an SSID with an XSS payload, an attacker can successfully exploit this issue. Recommendations For version V1.1.8.8, avo...

HPE Intelligent Management Center imcwlandm SSID Stack Buffer Overflow (CVE-2017-5806)

A stack buffer overflow exists in HPE Intelligent Management Center. The vulnerability is due to improper validation of the size field when parsing an SSID attribute. A remote, unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server...

CVE-2017-11435

The Humax Wi-Fi Router model HG100R- 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token...

Humax Wi-Fi Router HG100R Authentication Bypass Vulnerability

Humax Wi-Fi Router HG100R is a router device from Humax Digital, Korea. An authentication bypass vulnerability exists in the Humax Wi-Fi Router HG100R version 2.0.6. An attacker can exploit the vulnerability by sending a specially crafted request to the management console to retrieve sensitive...

HUMAX WiFi Router HG-100R DNS Hijacking Vulnerability

The HG-100R is a router. A DNS hijacking vulnerability exists in the HUMAX WiFi Router HG-100R. The vulnerability is caused by first constructing a special request to bypass the authentication of the management console. The vulnerability is due to the router failing to validate the session token...

Information disclosure

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

CVE-2017-8877

ASUS RT-AC * and RT-N * router devices are affected by a JSONP Information Disclosure vulnerability in firmware versions through 3.0.0.4.380.7378 . An attacker can exploit this flaw to obtain sensitive information, such as the SSID . No specific exploit details or remediation steps are provided i...

CVE-2017-8877

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

PT-2017-18599

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 Description The issue allows for JSONP information disclosure, including sensitive details such as the SSID. Recommendations For ASUS RT-AC and RT-N devices with firmware throu...

CVE-2017-8877: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

PT-2017-3557

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: A Remote Code Execution issue exists due to insufficient input validation in the HPE iMC Server service of the HPE Intelligent Management Center PLAT platform. Exploitation o...

CVE-2017-7398

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...

CVE-2017-7398: Cross-Site Request Forgery (CSRF)

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...