Searching routers software vulnerabilities


Denial of service in Ascend and 3com routers, w


Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.


Denial of service in Cisco routers running NAT


Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.


Livingston Portmaster routers running ComOS use


Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions.


Cisco routers 9.17 and earlier allow remote att


Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.


The on-line help system options in Cisco router


The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.


Cisco routers and switches running IOS 12.0 thr


Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.


Cross-site scripting vulnerability in web admin


Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script.


Netgear RM-356 and RT-338 series SOHO routers a


Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap.


Buffer overflow in Lucent Access Point 300, 600


Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.


Cisco CSS 11000 routers on the CS800 chassis al

Cisco | CSS |

Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service (CPU consumption or reboot) via a large number of TCP SYN packets to the circuit IP address, aka "ONDM Ping failure."


Enterasys XSR-1800 series Security Routers, whe


Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record route option set.


ZyXEL Prestige 623, 650, and 652 HW Routers, an


ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.


Cross-site scripting (XSS) vulnerability in the


Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL.


The web management interface in Edimax AR-6004


The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.


Belkin 54g wireless routers do not properly set


Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) weba dministration interfaces.


Belkin F5D7232-4 and F5D7230-4 wireless routers


Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a legitimate administrator is logged into the web management interface, allow remote attackers to access the management inferface without authentication.


Unspecified vulnerability in Juniper Networks J


Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to the DNS "client code," as demonstrated by the OUSPG PROTOS DNS test suite.


The web-based management interface in 2Wire, In


The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service (crash) via a CRLF sequence in a GET request.


T-Com Speedport 500V routers with firmware 1.31


T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value.


2wire 1701HG and 2071 Gateway routers, with 5.2


2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.


Software vulnerabilities results 1 to 20 of 44     
Page: 123