EUVD-2019-16855

Malware in sbrugna...

Linksys多款产品 安全漏洞

Linksys WRT1900ACS and others are products of Linksys, Inc.Linksys WRT1900ACS is a wireless router.Linksys EA7500 is a wireless router.Linksys E-Series is a router. A security vulnerability exists in various Linksys products that stems from the improper manipulation of the...

CVE-2025-6752: Stack-based Buffer Overflow

A vulnerability has been found in Linksys WRT1900ACS, EA7200, EA7450 and EA7500 up to 20250619 and classified as critical. This vulnerability affects the function SetDefaultConnectionService of the file /upnp/control/Layer3Forwarding of the component IGD. The manipulation of the argument...

CVE-2019-7579

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

CVE-2019-7311

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

Weak password vulnerability in Belkin's WRT1900ACS

The WRT1900ACS is a Belkin router product. A weak password vulnerability exists in the Belkin WRT1900ACS, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

CVE-2019-7579

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

CVE-2019-7579

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

Default credentials

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

CVE-2019-7579

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

CVE-2019-7579

CVE-2019-7579 affects Linksys WRT1900ACS devices (1.0.3.187766). An unauthenticated user can access a confidential file on the router’s webserver (ui/1.0.99.187766/dynamic/js/setup.js.localized), enabling enumeration of default guest network passwords. An attacker can use this 30-word list plus a...

PT-2019-18654

Name of the Vulnerable Software and Affected Versions Linksys WRT1900ACS version 1.0.3.187766 Description An issue exists where an unauthenticated user can access a confidential file setup.js.localized at the /ui/1.0.99.187766/dynamic/js/ endpoint, allowing an attacker to obtain a list of possibl...

CVE-2019-7579: Improper Authentication

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

CVE-2019-7311

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

CVE-2019-7311

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

Design/Logic Flaw

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

CVE-2019-7311

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

CVE-2019-7311

CVE-2019-7311 (Linksys WRT1900ACS 1.0.3.187766) describes a local vulnerability where the router stores the user login cookie (admin-auth) with base64-encoded cleartext, allowing a local attacker to discover the admin password and gain administrative access. The risk arises from lack of encryptio...

CVE-2019-7311: Missing Encryption of Sensitive Data

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

PT-2019-18521

Name of the Vulnerable Software and Affected Versions Linksys WRT1900ACS version 1.0.3.187766 Description The issue concerns a lack of encryption in storing the user login cookie, specifically the admin-auth cookie, which contains the admin password in base64 cleartext. This allows a local attack...