CVE-2009-5149

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access via the web management interface, related to a "password of the day" issue...

CVE-2015-7291

The CVE-2015-7291 CSRF vulnerability affects Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 in the adv_pwd_cgi web management interface. Exploitation could allow a remote attacker to hijack the authentication of arbitrary users and perform action...

CVE-2015-7289

The CVE-2015-7289 entry applies to ARRIS DG860A, TG862A, and TG862G cable modems with firmware TS0703128_100611 through TS0705125D_031115. The root cause is a hardcoded administrator password derived from the device serial number, enabling remote attackers to gain administrative access via the we...

CVE-2015-7291

Cross-site request forgery CSRF vulnerability in advpwdcgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7290

The CVE-2015-7290 entry describes a Cross-site Scripting (XSS) vulnerability in the adv_pwd_cgi parameter of the Arris web management interface, affecting DG860A, TG862A, and TG862G devices. The root cause is reflected XSS via the pwd parameter, enabling an attacker to inject arbitrary web script...

CVE-2015-7289

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP...

CVE-2009-5149

CVE-2009-5149 affects ARRIS DG860A, TG862A and TG862G cable modems with firmware TS0703128_100611 through TS0705125D_031115. The issue is a predictable technician password (“password of the day”) that can be exploited remotely to gain access via the web management interface. CERT/CC details furth...

Information disclosure

The Web Management GUI on Cisco Wireless LAN Controller WLC devices with software 7.4140.0 and 8.0120.0 allows remote attackers to cause a denial of service client disconnection via unspecified vectors, aka Bug ID CSCuw10610...

CVE-2015-6341

The Web Management GUI on Cisco Wireless LAN Controller WLC devices with software 7.4140.0 and 8.0120.0 allows remote attackers to cause a denial of service client disconnection via unspecified vectors, aka Bug ID CSCuw10610...

Cisco Wireless LAN Controller Client Disconnection Vulnerability

A vulnerability in the Web Management GUI of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to trigger client disconnection. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Juniper Networks Junos Space Web Management Interface Default Credentials (HTTP)

The remote Junos Space Web Management Interface is using known default credentials. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OOME from EAP 6 http management console

It was discovered that sending requests containing large headers to the Web Console produced a Java OutOfMemoryError in the HTTP management interface. An attacker could use this flaw to cause a denial of service...

CVE-2015-2915

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

Default credentials

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

CVE-2015-2915

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N Security Bypass Vulnerability (CNVD-2015-06116)

Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N is a wireless broadband router product. The Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N uses common admin:admin credentials for the web management interface and common medialink:password credentials for the wireless...

Belkin N600 DB Wireless Dual Band N+ Management Interface No Password Setting Vulnerability

Belkin N600 DB Wireless Dual Band N+ is a wireless dual band router product from Belkin USA. The Belkin N600 DB Wireless Dual Band N+ fails to set a default password for the web management interface, allowing an attacker to gain access to the web management interface or perform cross-site request...

SQL Injection Vulnerability in China Haida's WEB Management System

Guangzhou Zhonghaida Satellite Navigation Technology Co., Ltd. is the first listed company in the field of domestic mapping and geographic information equipment. A SQL injection vulnerability exists in China Haida's WEB management system. An attacker can utilize the vulnerability to obtain...

Generalized SQL Injection Vulnerability in VNet Series WEB Management System of Guangzhou Zhonghaida Satellite Navigation Technology Co.

COSHIDA VNet6 Professional Reference Station Receiver is one of COSHIDA's new VNet series of measurement systems, and it is also a professional reference station receiver specially designed for reference station applications. A generic SQL injection vulnerability exists in the pid parameter of th...

Cisco TelePresence IX5000 Systems Certificate Information Disclosure Vulnerability

A vulnerability in the directory on the Web Management Interface of Cisco TelePresence IX5000 Systems could allow an unauthenticated, remote attacker to decrypt captured traffic on the affected device or perform a man-in-the-middle attack. The vulnerability is due to the inclusion of the...