CVE-2021-45401

CVE-2021-45401 describes a command-injection vulnerability in the Tenda AC10U AC1200 router (AC10U V1.0 firmware V15.03.06.49_multi) exploited via the setUsbUnload path. The client-supplied deviceName is passed directly to the doSystemCmd function, enabling arbitrary command execution. Documents ...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2022-12736)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the devName parameter...

D-Link DIR-846 安全漏洞

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-11183)

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the rebootTime parameter...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-11181)

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via list parameters...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-11182)

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the schedStartTime and schedEndTime parameters...

Tenda AC9 has an unspecified vulnerability

Tenda AC9, a wireless router from Tenda China, is vulnerable to a security flaw in Tenda AC9 v3.0 that allows remote execution of code via shell metacharacters in the guestuser field to a fastcall function request with POST. No details of the vulnerability are currently available...

Tp-link TL-WR841N Trust Management Issues Vulnerability

The Tp-link TL-WR841N is a wireless router from China P&L Tp-link. The Tp-link TL-WR841N is vulnerable to a trust management issue, which can be exploited by a remote attacker to intercept credentials and subsequently perform management operations on an affected device via the web-based managemen...

TP-LINK AC1750 缓冲区错误漏洞

The TP-LINK AC1750 is a wireless router from China P&L TP-LINK. A buffer error vulnerability exists in the TP-Link AC1750 version 1.1.4 Build 20211022 rel.59103, which stems from a lack of proper validation of user-supplied data, which could result in reading beyond the end of an allocated buffer...

Authentication flaw

The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format. Successful exploitation of this vulnerability could allow a remote attacker to intercept credentials and subsequently perfo...

Tp-link TL-WR841N 安全漏洞

The Tp-link TL-WR841N is a wireless router from China P&L Tp-link. The Tp-link TL-WR841N is vulnerable to a trust management issue, which can be exploited by a remote attacker to intercept credentials and subsequently perform management operations on an affected device via the web-based managemen...

D-Link Dir-823-Pro 命令注入漏洞

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the staticroutelist parameter...

D-Link Dir-823-Pro 命令注入漏洞

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

Tenda Ax3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the wpapskcrypto parameter...

Tp-link TP-Link Archer C9 has an unspecified vulnerability

Tp-link TP-Link Archer C9 is a wireless router from Tp-link.A security vulnerability exists in the TP-Link Archer C90, which stems from a flaw in the handling of DNS responses. An attacker could exploit the vulnerability to execute arbitrary code on an affected TP-Link Archer C90 router...

ASUS RT-AX56U Path Traversal Vulnerability

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A path traversal vulnerability exists in ASUS RT-AX56U, which stems from the insufficient filtering of special characters in URL parameters by the login function of ASUS RT-AX56U, which could be exploited by an unauthenticated LAN attacke...

ASUS RT-AX56U has unspecified vulnerabilities

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A security vulnerability exists in the ASUS RT-AX56U Wi-Fi router, which stems from incorrect validation of the length of the httpd parameter. An attacker could use the vulnerability to initiate arbitrary code execution to control the...

ASUS RT-AC52U_B1 Cross-Site Scripting Vulnerability

Asus Rt-Ac52UB1 is a dual-band wireless router from Asus China.A cross-site scripting vulnerability exists in ASUS RT-AC52UB1, which stems from the presence of invalid data filtering in ASUS RT-AC52U B1 version 3.0.0.4.380.10931, which could lead to user session hijacking. No detailed vulnerabili...

Trendnet AC2600 TEW-827DRU Cross-Site Request Forgery Vulnerability

Trendnet AC2600 TEW-827DRU is a wireless router.Trendnet AC2600 TEW-827DRU has a security vulnerability, which originates from Trendnet AC2600 TEW-827DRU version 2.08B01 fails to properly implement csrf protection, no details of the vulnerability are provided...

Trendnet AC2600 TEW-827DRU Command Injection Vulnerability

Trendnet AC2600 TEW-827DRU is a wireless router.Trendnet AC2600 TEW-827DRU has a security vulnerability that can be exploited by attackers to conduct command injection attacks as root...