CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

Design/Logic Flaw

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

PT-2023-15491 · Vtech · Vtech Iad604-Il +1

Name of the Vulnerable Software and Affected Versions: Bezeq Vtech NB403-IL version BZ 2.02.07.09.13.01 Vtech IAD604-IL versions BZ 2.02.07.09.13.01, BZ 2.02.07.09.13T, and BZ 2.02.07.09.09T Description: An issue was discovered that allows remote attackers to gain sensitive information via the...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

CVE-2022-47848

The CVE-2022-47848 issue affects Bezeq Vtech NB403-IL (BZ_2.02.07.09.13.01) and Vtech IAD604-IL (BZ_2.02.07.09.13.01, 13T, 09T). Description: remote attackers can obtain sensitive information via the UPnP service’s rootDesc.xml page, indicating an information disclosure via UPnP. Root cause: expo...

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service. The issue results from the lack of proper validation o...

PT-2023-4498 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the UPnP service, resulting...

The vulnerability of MiniUPnP software for Ubiquiti EdgeRouter and Aircube routers allows a hacker to induce a service failure.

The vulnerability of MiniUPnP software for Ubiquiti EdgeRouter and Aircube routers lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

CVE-2023-31998

A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices...

CVE-2023-31998

A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices...

Heap overflow

A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices...

CVE-2023-31998

A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices...

CVE-2023-31998

This CVE concerns a heap overflow in Ubiquiti EdgeRouter and AirCube devices, linked to the MiniUPnPd UPnP service. A local-network attacker could interrupt UPnP (and, per PT-2023-3998, potentially execute arbitrary code). Affected versions include EdgeRouter prior to 2.0.9-hotfix.7 and AirCube p...

CVE-2023-31998

A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices...

The vulnerability of the system() function in NETGEAR RAX30 microprogramming devices allows a hacker to execute arbitrary code.

The vulnerability of the system function in NETGEAR RAX30 microprogramming devices stems from insufficient validation of input data during the processing of port discovery requests via UPnP. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NETGEAR RAX30 UPnP Command Injection Vulnerability

The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...

D-Link DIR-859 Router Command Execution Vulnerability

D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local...

CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...

Stack overflow

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...