CVE-2020-35755

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luciservice Read NVRAM Direct Access Information Leak. The luciservice deamon running on port 7777 provides a sub-category of commands for which Read is prepended. Commands in this category are able to directly read the...

CVE-2020-35755

CVE-2020-35755 affects Libre Wireless LS9 LS1.5/p7040 devices. The issue is a direct information leak via the luci_service daemon on port 7777, where a Read_ command category enables reading the device configuration NVRAM. This allows access to sensitive data stored in NVRAM, including the Wi‑Fi ...

Libre Wireless 访问控制错误漏洞

The Libre Wireless LS9 is a networking device from Libre Wireless USA. A security vulnerability exists in the Libre Wireless LS9 LS1.5/p7040 devices that stems from having Unauthenticated Root ADB Access Over TCP.The web interface of the LS9 provides access to ADB over TCP...

Libre Wireless LS9 访问控制错误漏洞

Libre Wireless LS9 is a network device from Libre Wireless, Inc. Libre Wireless LS9 LS1.5/p7040 devices. an access control error vulnerability exists that stems from the luci service daemon running on port 7777 providing a subclass of commands with the Read prefix. Such commands can directly read...

Libre Wireless LS9 授权问题漏洞

The Libre Wireless LS9 is a networking device from Libre Wireless USA. A security vulnerability exists in the Libre Wireless LS9 LS1.5/p7040 devices that stems from the presence of an authentication bypass in the web interface that does not properly restrict access to internal functions...

Libre Wireless 访问控制错误漏洞

The Libre Wireless LS9 is a networking device from Libre Wireless, Inc. A security vulnerability exists in the Libre Wireless LS9 LS1.5/p7040 devices. The vulnerability stems from a luci service daemon running on port 7777 returning the device configuration password in plaintext without...

Shenzhen Skyworth RN510 Information Disclosure Vulnerability

Overview ======== Title:- UnAuthenticated Sensitive information Discloser in RN510 Mesh Extender. CVE-ID :- CVE-2021-25326 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested...

Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

Overview ======== Title:- Authenticated XSRF in RN510 Mesh Extender. CVE-ID :- CVE-2021-25327 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested and verified Potential 2.RN62...

Shenzhen Jixiang Tengda Technology Co., Ltd. AC11 suffers from Denial of Service Vulnerability (CNVD-2021-35781)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A denial of service vulnerability exists in the Shenzhen Jixiang Tengda AC11, which can be exploited by attackers to cause a denial of service attack...

Binary Vulnerability in AC11 of Shenzhen Jixiang Tengda Technology Co. Ltd (CNVD-2021-35779)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A binary vulnerability exists in the Shenzhen Jixiang Tengda AC11, which can be exploited by attackers to cause a denial of service...

Shenzhen Jixiang Tengda Technology Co., Ltd. AC11 suffers from Denial of Service Vulnerability (CNVD-2021-35780)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A denial of service vulnerability exists in the Shenzhen Jixiang Tengda AC11, which can be exploited by attackers to cause a denial of service attack...

Unauthorized Access Vulnerability in Tenda Wireless Routers

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. An unauthorized access vulnerability exists in...

CVE-2021-30229

The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates from api/ZRAndlink/setZRAndlink, that can be exploited by remote attackers to execute arbitrary...

Texas Instruments SimpleLink 输入验证错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products that originates from an integer overflow in the host MCU's api when attempting to connect to a WIFI...

Unauthorized Access Vulnerability in WF2710 of Shenzhen Leike Industrial Co.

The WF2710 is a wireless router. Ltd WF2710 has an unauthorized access vulnerability that can be exploited by an attacker to obtain sensitive information...

Command Execution Vulnerability in Wireless SmartWeb Management System

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A command execution vulnerability exists in the Wireless SmartWeb manageme...

Shenzhen Jixiang Tengda Technology Co., Ltd. AC11 suffers from denial of service vulnerability

The Tundra AC11 is a wireless router that uses the RTOS operating system. A denial of service vulnerability exists in the Shenzhen Jixiang Tengda AC11, which can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in MW5230 of Shenzhen Leike Industrial Co.

The MW5230 is a wireless router. Shenzhen Leike Industrial Co. MW5230 has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Shenzhen Jixiang Tengda Technology Co., Ltd. AC11 suffers from Denial of Service Vulnerability (CNVD-2021-34597)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A denial of service vulnerability exists in the Shenzhen Jixiang Tengda AC11, which can be exploited by attackers to cause a denial of service...