TOTOLINK LR1200GB setWanCfg Function OS Command Injection Vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from an operating system command...

PT-2024-19623 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the hostName parameter in the setWanCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK A3300R version...

Impact of Terrapin SSH Attack

The Terrapin attack allows an attacker with the ability to intercept SSH traffic on affected Palo Alto Networks products through machine-in-the-middle or MitM attacks to downgrade connection security and force the usage of less secure client authentication algorithms when an administrator or user...

VulnCheck KEV: CVE-2020-26073

Cisco SD-WAN vManage Software unauthenticated directory traversal...

The vulnerability of the controller service of the SonicWall WAN Acceleration (WXA) 5000 Virtual Appliance allows attackers to bypass authentication procedures, gain unauthorized access to protected information, and execute arbitrary code. This vulnerability enables attackers to circumvent security measures.

The vulnerability of the virtual device controller service in the SonicWall WAN Acceleration WXA 5000 Virtual Appliance lies in the use of rigidly encoded credentials. Exploiting this vulnerability allows an attacker operating remotely to bypass authentication procedures, gain unauthorized access...

CVE-2023-49410

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...

CVE-2023-49410

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...

PT-2023-31212 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the set wan status function. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the set wan status...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the failure of the setwanstatus function to correctly validate the length of the input data, and can be exploited by a remote attacker to...

VulnCheck KEV: CVE-2019-12987

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 3 of 6...

VulnCheck KEV: CVE-2019-12985

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 1 of 6...

VulnCheck KEV: CVE-2019-12990

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal...

Fortinet FortiClient Hardcoding Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

PT-2023-9500 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the process that classifies traffic going to the Unified Threat Defense UTD component could allow an unauthenticated, remote attacker to cause a denial of...

The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute...

VulnCheck KEV: CVE-2019-12988

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...

Cisco Catalyst SD-WAN Manager Local File Inclusion Vulnerability

Cisco Catalyst SD-WAN Manager is an open and secure management console for cloud-level architectures. A local file inclusion vulnerability exists in the Cisco Catalyst SD-WAN Manager web UI, which can be exploited by a remote attacker to submit a special request that can read the contents of a...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

Input validation

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-20261

Cisco Catalyst SD-WAN Manager web UI Local File Inclusion (CVE-2023-20261) allows an authenticated remote attacker to read arbitrary files from the underlying Linux filesystem by abusing improper validation of parameters in the web UI. Affected component is the web UI of Cisco Catalyst SD-WAN Man...