8 matches found
CVE-2020-24104
XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter...
CVE-2020-24104
CVE-2020-24104 refers to an XSS flaw in the PIX-Link Repeater/Router LV-WR07 (firmware v28K.Router.20170904). The vulnerability concerns the wireless.htm SET2 parameter, enabling an attacker to steal credentials via a crafted ESSID without network connectivity. Affected component: the device’s we...
CVE-2020-24104: Improper Neutralization of Input During Web Page Generation
XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter...
PT-2020-15637
Name of the Vulnerable Software and Affected Versions PIX-Link Repeater/Router LV-WR07 version v28K.Router.20170904 Description The issue allows attackers to steal credentials without being connected to the network, using a crafted ESSID as the attack vector, specifically targeting the SET2...
PT-2019-3088
Name of the Vulnerable Software and Affected Versions D-Link DCS series versions 1.08.11 and below DCS-5009L D-Link DCS series versions 1.14.09 and below DCS-5010L D-Link DCS series versions 1.15.12 and below DCS-5020L D-Link DCS series versions 1.03.07 and below DCS-5025L D-Link DCS series...
CVE-2019-10999: Out-of-bounds Write
The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable...
