CVE-2006-5901

Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at the hardcoded address. NOTE: it could be argued that this...

CVE-2006-5901

Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at the hardcoded address. NOTE: it could be argued that this...

CVE-2006-5901

CVE-2006-5901 affects Hawking Technology wireless router WR254-CA. The entry notes the device uses a hardcoded IP address among DNS server addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at that hardcoded address....

CVE-2006-5711

ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI...

Hawking Technology wireless router WR254-CA DNS issue

Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information. Exploiting thi...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to...

CVE-2006-3344

Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component...

CVE-2006-3344

Siemens Speedstream Wireless Router 2624 is affected by CVE-2006-3344 via the UPnP/1.0 component, allowing local users to bypass authentication and access protected files. The issue is tied to UPnP/1.0 usage in the router, with impact described as partial on confidentiality, integrity, and availa...

PT-2006-4236 · None +1 · Upnp +1

Name of the Vulnerable Software and Affected Versions: Siemens Speedstream Wireless Router version 2624 Description: The issue allows local users to bypass authentication and access protected files by utilizing the Universal Plug and Play UPnP/1.0 component. Recommendations: For Siemens Speedstre...

Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability

Digital Armaments advisory is 05.02.2006 http://www.digitalarmaments.com/2006290674551938.html I. Background The SpeedStream Wireless DSL/Cable Router is usually adopted for home and small business solutions. Together with an existing DSL or cable modem connection, this affordable, easy to use...

[NEWS] D-Link DSL-G604T Wireless Router Directory Traversal

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-4723

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service device reboot via a series of crafted fragmented UDP packets, possibly involving a missing fragment...

CVE-2005-4820

SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service reboot by flooding the router with traffic...

CVE-2004-2637

The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions...

CVE-2005-2589

Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption...

SiemensSANTIS50.txt

Secure Network - Security Research Advisory Vuln name: Siemens SANTIS 50 Authentication Vulnerability Systems affected: Siemens Santis 50 Wireless router firmware version: 4.2.8.0 Likely to be affected: Ericsson HN294dp Dynalink RTA300W Severity: medium risk Local/Remote: Remote limited to the LA...

Multiple Siemens Santis 50 wireless router vulnerabilities

DoS, local network administration backdoor access...

Siemens SANTIS 50 Authentication Vulnerability

Secure Network - Security Research Advisory Vuln name: Siemens SANTIS 50 Authentication Vulnerability Systems affected: Siemens Santis 50 Wireless router firmware version: 4.2.8.0 Likely to be affected: Ericsson HN294dp Dynalink RTA300W Severity: medium risk Local/Remote: Remote limited to the LA...

CVE-2005-1566

Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell...