CVE-2024-10119

CVE-2024-10119 affects SECOM WRTM326 wireless routers. The vulnerability is an OS command injection caused by improper validation of a specific parameter, allowing an unauthenticated remote attacker to execute arbitrary system commands via crafted requests. Impact is high (remote code execution) ...

D-Link DIR-619L Buffer Overflow Vulnerability (CNVD-2024-43210)

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter curTime of the formSetRoute function of the file /goform/formSetRoute that fails to correctly validate the length size of the input...

D-Link DIR-619L Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router. The D-Link DIR-619L suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow...

AUO DIR-605L formdumpeasysetup function buffer overflow vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formdumpeasysetup function in the /goform/formdumpeasysetup page that fails to correctly validate the length of the inpu...

AUO DIR-605L formDeviceReboot Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the nextpage parameter of the formDeviceReboot function in the /goform/formDeviceReboot page that fails to correctly validate the length and size of th...

AUO DIR-605L formEasySetupWizard Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formEasySetupWizard/formEasySetupWizard2 function in the /goform/formEasySetupWizard page that fails to correctly valida...

D-Link COVR-2600R Buffer Overflow Vulnerability

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

AUO DIR-605L formSetQoS Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formSetQoS function in the file /goform/formSetQoS that fails to correctly validate the length of the input data, which...

AUO DIR-605L formSetWizard2 Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formSetWizard1/formSetWizard2 function failing to properly validate the length of the input data, which can be exploited...

AUO DIR-605L formSetEasy_Wizard Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formSetEasyWizard function in the /goform/formSetEasyWizard page that fails to correctly validate the length of the inpu...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router. The D-Link DIR-619L suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow...

D-Link DIR-605L 安全漏洞

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the webpage parameter of the formSetWanPPPoE function in the /goform/formSetWanPPPoE page that fails to correctly validate the length and size of the...

PT-2024-9598 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0 v15.11.0.20 Description: The issue is related to the formSetUSBPartitionUmount function of the Tenda G3 wireless access point's firmware, which fails to neutralize special elements when processing the usbPartitionName...

TOTOLINK T10 Command Injection Vulnerability

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. The TOTOLINK T10 suffers from a command injection vulnerability that stems from the parameter command in the file /cgi-bin/cstecgi.cgi that can lead to operating system command injection. No details of the...

DIR-X4860 Buffer Overflow Vulnerability at AUO Electronic Devices (Shanghai) Co.

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO Electronic Devices Shanghai Co. The DIR-X4860 suffers from a buffer overflow vulnerability that stems from the inclusion of a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on...

TOTOLINK A720R exportOvpn OS Command Injection Vulnerability

The TOTOLINK A720R is a wireless router. TOTOLINK A720R suffers from an operating system command injection vulnerability. The vulnerability stems from the function exportOvpn, and no detailed vulnerability details are provided at this time...

Unspecified Vulnerability in Tenda FH1201 (CNVD-2024-40285)

The Tenda FH1201 is a wireless router from Tenda China. A security vulnerability exists in Tenda FH1201 v1.2.0.14, which is caused by a stack buffer overflow vulnerability in "formWrlExtraGet". The vulnerability is caused by a stack buffer overflow vulnerability in "formWrlExtraGet"...

CVE-2024-34195

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlanssid field. This oversight leads to potential buffer overflow under specific...

CVE-2024-34195

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlanssid field. This oversight leads to potential buffer overflow under specific...

CVE-2024-34198

TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlanssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long...